以下操作断网
工具先下载好
userinit.EXE重新替换
方法如前
重启替换后
1.建议使用XDelBox删除以下文件:(
XDelBox1.8下载)
使用说明:(先勾选抑制再生)删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,(在待删除文件列表里点击右键选择从剪贴板导入不检查路径,)选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\system32\cioommcb.dll
c:\windows\system32\dhehgpjc.dll
c:\windows\system32\djocgddo.dll
c:\windows\system32\gjhjmheo.dll
c:\windows\system32\gkhamial.dll
c:\windows\system32\llbndmgg.dll
c:\windows\system32\lnipgmii.dll
c:\windows\system32\mhelhbdi.dll
c:\windows\system32\nldbhmge.dll
c:\windows\system32\pamjiihi.dll
c:\windows\system32\poghidld.dll
c:\docume~1\luckys~1\locals~1\temp\msdll.dat
c:\docume~1\luckys~1\locals~1\temp\zxdll.dat
c:\program files\internet explorer\powerjz.zsk
c:\windows\system32\4fbfd5a4.dll
c:\windows\system32\704c3595.dll
c:\windows\system32\91c7df6d.dll
c:\windows\system32\a1a6bc2e.dll
c:\windows\system32\cc80f0b4.dll
c:\windows\system32\fa9b58aa.dll
c:\windows\system32\f71a67d5.dll
c:\windows\system32\1957817a.dll
c:\windows\system32\72b29486.dll
c:\windows\system32\c60bc4df.dll
c:\windows\system32\f65bdec7.dll
c:\windows\system32\viofly32.dll
c:\docume~1\luckys~1\locals~1\temp\535264
c:\windows\system32\viofly32.exe
c:\windows\system32\zxexe.exe
c:\windows\system32\iaofpcmb.dll
c:\windows\system32\oebhphaj.dll
c:\windows\system32\kdhbojgg.dll
c:\windows\system32\dabnbfjf.dll
c:\docume~1\luckys~1\locals~1\temp\~2752c.tmp
c:\windows\system32\drivers\aliimz.sys
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[031361E8] <C:\WINDOWS\system32\gjhjmheo.dll>
[D1E1093C] <C:\WINDOWS\system32\dhehgpjc.dll>
[D38C0DD8] <C:\WINDOWS\system32\djocgddo.dll>
[98012D5D] <C:\WINDOWS\system32\poghidld.dll>
[75DB160E] <C:\WINDOWS\system32\nldbhmge.dll>
[61E51BD2] <C:\WINDOWS\system32\mhelhbdi.dll>
[61E51BD2] <C:\WINDOWS\system32\mhelhbdi.dll>
[57290622] <C:\WINDOWS\system32\lnipgmii.dll>
[55B7D600] <C:\WINDOWS\system32\llbndmgg.dll>
[C28866CB] <C:\WINDOWS\system32\cioommcb.dll>
[041A62A5] <C:\WINDOWS\system32\gkhamial.dll>
[9A632212] <C:\WINDOWS\system32\pamjiihi.dll>
[{BC8975EB-DD3E-406A-8DF9-218848C3B594}] <C:\Program Files\Internet Explorer\PowerJz.zsk>
[{031361E8-9C74-4767-96D1-A2EA71425F47}] <C:\WINDOWS\system32\gjhjmheo.dll>
[{1957817A-94B2-4CAC-B113-A331809B5730}] <1957817A.dll>
[{D1E1093C-138C-4DF5-A7A5-5082146677F4}] <C:\WINDOWS\system32\dhehgpjc.dll>
[{D38C0DD8-00C1-4099-B8E9-E26ACDA1B701}] <C:\WINDOWS\system32\djocgddo.dll>
[{98012D5D-AF81-4CAB-8AE9-0C2F07C5D60C}] <C:\WINDOWS\system32\poghidld.dll>
[{D1E1093C-138C-4DF5-A7A5-5082146677F4}] <C:\WINDOWS\system32\dhehgpjc.dll>
[{D38C0DD8-00C1-4099-B8E9-E26ACDA1B701}] <C:\WINDOWS\system32\djocgddo.dll>
[{98012D5D-AF81-4CAB-8AE9-0C2F07C5D60C}] <C:\WINDOWS\system32\poghidld.dll>
[{F71A67D5-5BBB-47A3-9534-4150FC739257}] <F71A67D5.dll>
[{CC80F0B4-04D7-44D0-8DB9-9109B5B72141}] <CC80F0B4.dll>
[{75DB160E-1B22-40C6-8ABE-2E3FFBBC5A58}] <C:\WINDOWS\system32\nldbhmge.dll>
[{A1A6BC2E-C6A1-43C1-8884-A31D772F42B8}] <A1A6BC2E.dll>
[{61E51BD2-E520-4EAD-B5C9-FF016DD5B891}] <C:\WINDOWS\system32\mhelhbdi.dll>
[{72B29486-39B6-4241-B234-B57DEF78302F}] <72B29486.dll>
[{57290622-FDE1-48BA-B17D-A33C9702830A}] <C:\WINDOWS\system32\lnipgmii.dll>
[{55B7D600-2AF8-44AE-A34D-F01D578700E1}] <C:\WINDOWS\system32\llbndmgg.dll>
[{55B7D600-2AF8-44AE-A34D-F01D578700E1}] <C:\WINDOWS\system32\llbndmgg.dll>
[{C28866CB-8291-4CCE-8423-B7C211E53FF2}] <C:\WINDOWS\system32\cioommcb.dll>
[{041A62A5-09B4-4AF0-9133-AEDFAE7FD607}] <C:\WINDOWS\system32\gkhamial.dll>
[{F65BDEC7-4BF3-4512-840F-68B166B6D7AC}] <F65BDEC7.dll>
[{9A632212-1A61-49A5-8BE0-880FE6FC638F}] <C:\WINDOWS\system32\pamjiihi.dll>
[{FA9B58AA-6759-4C02-B37F-572FC2F1A231}] <FA9B58AA.dll>
[{FA9B58AA-6759-4C02-B37F-572FC2F1A231}] <FA9B58AA.dll>
[{91C7DF6D-AEF5-4136-9252-AF030D7A5931}] <91C7DF6D.dll>
[{C60BC4DF-4CAB-4F66-ABED-D3FCCE7910AD}] <C60BC4DF.dll>
[{704C3595-DB85-40F6-A601-8D6F346907BD}] <704C3595.dll>
[{4FBFD5A4-5FE8-4444-8BD9-FD0FAFA64F96}] <4FBFD5A4.dll>
注意该项[AppInit_DLLs]修改:把<pamjiihi.dll,gkhamial.dll,cioommcb.dll,llbndmgg.dll,lnipgmii.dll,mhelhbdi.dll,nldbhmge.dll,poghidld.dll,djocgddo.dll,dhehgpjc.dll,gjhjmheo.dll>修改为<>即清空
[stup] <C:\DOCUME~1\LUCKYS~1\LOCALS~1\Temp\535264>
[nwiz] <vioFly32.exe>
[zxexe.exe] <C:\WINDOWS\system32\zxexe.exe>
[2A8F9C6B] <C:\WINDOWS\system32\iaofpcmb.dll>
[8EB191A3] <C:\WINDOWS\system32\oebhphaj.dll>
[4D1B8300] <C:\WINDOWS\system32\kdhbojgg.dll>
[DAB7BF3F] <C:\WINDOWS\system32\dabnbfjf.dll>
[{2A8F9C6B-5DEE-4FA6-B267-9853A479E1C7}] <C:\WINDOWS\system32\iaofpcmb.dll>
[{8EB191A3-9964-4030-9734-65DA2BEAEACA}] <C:\WINDOWS\system32\oebhphaj.dll>
[{4D1B8300-035D-45AE-A082-72EAFD9F7ADE}] <C:\WINDOWS\system32\kdhbojgg.dll>
[{DAB7BF3F-806F-4601-8DA5-6A41D4C8E37C}] <C:\WINDOWS\system32\dabnbfjf.dll>
[IFEO[360rpt.exe]] <C:\WINDOWS\system32\svchost.exe>
[IFEO[360Safe.exe]] <C:\WINDOWS\system32\svchost.exe>
[IFEO[360tray.exe]] <C:\WINDOWS\system32\svchost.exe>
[IFEO[DrRtp.exe]] <C:\WINDOWS\system32\svchost.exe>
[IFEO[QQDoctor.exe]] <C:\WINDOWS\system32\svchost.exe>
[IFEO[RStray.exe]] <C:\WINDOWS\system32\svchost.exe>
启动项目 -- 服务-- 驱动程序之如下项删除:
(勾选隐藏已认证的微软项目,选中有问题的驱动/服务后,点"删除服务",点"设置"按钮即可。注意弹出的窗口中要点"否"才是确认删除服务)
[zx / zx] <\??\C:\DOCUME~1\LUCKYS~1\LOCALS~1\Temp\~2752c.tmp>
[aliimz / aliimz] <System32\Drivers\aliimz.sys>
系统修复-- 浏览器加载项之如下项删除:
[] <C:\Program Files\Internet Explorer\PowerJz.zsk>
系统修复-- HOSTS文件--重置