下载IFEO修复程序
http://bbs.ikaka.com/attachment.aspx?attachmentid=435625建议使用XDelBox删除以下文件
复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,重启删除
c:\windows\fonts\a97cracb.fon
c:\windows\fonts\bqgc5yhmsd4yd.fon
c:\windows\fonts\vds9ae5g5fmed.fon
c:\windows\system32\08223b03.dll
c:\windows\system32\122b901e.dll
c:\windows\system32\2ef0d734.dll
c:\windows\system32\704c3595.dll
c:\windows\system32\76b9ba7a.dll
c:\windows\system32\appmgmts.dll
c:\windows\system32\bmsg6pdmd4ht.dll
c:\windows\system32\btmband89jc9pspq5eknj.dll
c:\windows\system32\crsaqd4hw.dll
c:\windows\system32\dhdhws7ffw.dll
c:\windows\system32\ed78ab9.dll
c:\windows\system32\emfvcsfcrkarfbbtqw5v5.dll
c:\windows\system32\empppccsa8gtjurjn.dll
c:\windows\system32\enyn5x48hrtxc.dll
c:\windows\system32\gu6f5sw42mdc.dll
c:\windows\system32\jy8sgunwqbzb3x2bphy.dll
c:\windows\system32\mfr9fpruefz9vndrvejunw3.dll
c:\windows\system32\ndxq9awmc.dll
c:\windows\system32\q9q2mhj3utberm7wc.dll
c:\windows\system32\rfpz9wwyy2np.dll
c:\windows\system32\scevfjrcmab7.dll
c:\windows\system32\wdgsvbqas3xk.dll
c:\windows\system32\xatgkbdb3yxc.dll
c:\windows\system32\y4npjwjnr.dll
c:\windows\system32\z5wrxqhagksjxwt.dll
c:\docume~1\admini~1\locals~1\temp\tmp.tmp
c:\windows\system32\emhnpubaaf7xjuxbbdxsg.dll
c:\windows\system32\6to4.dll
c:\windows\system32\wmdmpmsp.dll
c:\windows\system32\mspmsnsv.dll
c:\windows\system32\rasauto.dll
c:\windows\system32\nwsapagent.dll
c:\windows\system32\nwcworkstation.dll
c:\windows\system32\ntmssvc.dll
c:\windows\system32\ias.dll
c:\windows\system32\appmgmts.dll
c:\docume~1\admini~1\locals~1\temp\cqhabmjtqoao
c:\windows\system32\drivers\asyncmac.sys
c:\windows\system32\drivers\bdguard.sys
c:\windows\system32\drivers\wmisvc.sys
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[{737858A9-9AEA-4838-9B49-54DA731F7F37}] <C:\WINDOWS\system32\BMsg6pdMD4ht.dll>
[{93F33500-527E-4E33-AECA-69B15243A90E}] <C:\WINDOWS\system32\cRsAQd4hw.dll>
[{50EBD6A5-0CF6-4E59-AE08-CCD991AA0596}] <C:\WINDOWS\system32\GU6f5sW42mdc.dll>
[{38FEFE05-702C-440D-AD5C-B796209A1CC5}] <C:\WINDOWS\system32\Y4npJWJNr.dll>
[{1719B301-B494-4185-9379-242461F9CF02}] <C:\WINDOWS\system32\BtmBAnd89jc9PsPq5EKNj.dll>
[{822775B8-E45B-4E55-9325-0753A0C1DC00}] <C:\WINDOWS\system32\wdGSVBqAs3Xk.dll>
[{5C901F36-6395-4667-AF85-B1B64AD3693F}] <C:\WINDOWS\system32\XatgKbDb3Yxc.dll>
[{A5CA6C70-7185-4466-AB45-B1C34E7A37CA}] <C:\WINDOWS\system32\ed78ab9.dll>
[{8E6D4583-0FA1-41B2-BAAA-63352E6333CA}] <C:\WINDOWS\system32\jY8sGUnWqbZb3x2BPhY.dll>
[{0A2D7F10-1153-4061-AA4B-ACB870212B57}] <C:\WINDOWS\system32\z5WRXqHagksJxWt.dll>
[{51AA0D89-E9A9-4284-93E8-40C0FDD59304}] <C:\WINDOWS\system32\eNyN5X48HrtXc.dll>
[{2EF0D734-21FD-4225-A1A2-BCD296182AAF}] <C:\WINDOWS\system32\2EF0D734.dll>
[{23DA65D2-C696-4EE4-BEE8-B4841DEC3E30}] <C:\WINDOWS\system32\ndxq9awMc.dll>
[{BD07AE7E-DB9C-4FFB-BD21-99DCC8434610}] <C:\WINDOWS\system32\EMPPpCCSA8GtjURjn.dll>
[{CD478099-014D-4B3A-A4BB-B518F1019BC7}] <C:\WINDOWS\system32\SCEVFJRCmaB7.dll>
[{4642593F-4159-4C7B-9036-33D6CD7F1750}] <C:\WINDOWS\fonts\vds9ae5G5FmED.fon>
[{1055CA44-51F8-486B-8CBD-DC7AD4213F1E}] <C:\WINDOWS\fonts\bQgc5yHMSD4yd.fon>
[{36AC68E6-0C26-4D39-B98E-54B49DAB6BAA}] <C:\WINDOWS\system32\dhDhwS7fFW.dll>
[{8708994F-1758-4C2C-9A3F-FA22D6CCCB41}] <C:\WINDOWS\fonts\A97CRaCB.fon>
[{08223B03-1B38-4A33-A83A-A4D3CC1D6E4E}] <C:\WINDOWS\system32\08223B03.dll>
[{704C3595-DB85-40F6-A601-8D6F346907BD}] <C:\WINDOWS\system32\704C3595.dll>
[{108DA6C0-CFBF-41D4-9A09-C4D06AE6FFD2}] <C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll>
[{76B9BA7A-81D0-4979-8598-8471F2AB5186}] <C:\WINDOWS\system32\76B9BA7A.dll>
[{0220FBE7-F757-4C74-B246-D6703DCF1087}] <C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll>
[{9AD1DE62-196C-4C01-9A2F-0BEDEF727C59}] <C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll>
[{5405A7B2-F3F5-446F-8715-2A4EF674E079}] <C:\WINDOWS\system32\rfpz9wwyy2np.dll>
[{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}] <C:\WINDOWS\system32\122B901E.dll>
[{E3531A16-FFEA-416F-82DF-32FEDE02EABF}] <C:\WINDOWS\system32\emHnPuBAaF7XjuXBbdxSg.dll>
启动项目 -- 服务 -- Win32服务应用程序之如下项禁用:
[6to4 / 6to4] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\6to4.dll>
[WmdmPmSp / WmdmPmSp] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\WmdmPmSp.dll>
[Portable Media Serial Number Service / WmdmPmSN] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\mspmsnsv.dll>
[Remote Access Auto Connection Manager / RasAuto] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasauto.dll>
[Nwsapagent / Nwsapagent] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Nwsapagent.dll>
[NWCWorkstation / NWCWorkstation] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\NWCWorkstation.dll>
[Removable Storage / NtmsSvc] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\ntmssvc.dll>
[Ias / Ias] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Ias.dll>
[Application Management / AppMgmt] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[atoptqqamnqt / atoptqqamnqt] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cqhabmjtqoao>
[RAS Asynchronous Media Driver / AsyncMac] <system32\DRIVERS\asyncmac.sys>
[BdGuard / BdGuard] <\SystemRoot\system32\drivers\BDGuard.SYS>
[WmiSvc / WmiSvc] <\??\C:\WINDOWS\system32\drivers\WmiSvc.sys>
替换附件中的文件哦。