仍有系统文件没有修复
下载附件，解压至桌面，启动里面的程序后，点击“开始替换”，程序提示重启电脑时，立即重启（其他人不可乱用，只适用于楼主）
附件: 替换文件.rar (2009-8-25 15:34:24, 277.55 K)
该附件被下载次数 101
以下的残余最好也清理下
在扫日志的SRENG工具》启动项目》注册表》里面找下面项目删除：
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll,> 注意此项是把<C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll,>修改为<>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{E3531A16-FFEA-416F-82DF-32FEDE02EABF}><C:\WINDOWS\system32\emHnPuBAaF7XjuXBbdxSg.dll> [File is missing]
<{69B265A2-A172-4D27-BDF1-917E6D8B1DCC}><C:\WINDOWS\fonts\jUxfqJDwmfQEHcy2.fon> [File is missing]
<{9AD1DE62-196C-4C01-9A2F-0BEDEF727C59}><C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll> [File is missing]
<{427E02E6-39DB-4424-A49C-7553CD1331F5}><C:\WINDOWS\system32\WcCtgJ4zcxHF.dll> [File is missing]
<{F1455861-8C40-4095-ABD8-7BEAE5ADF92E}><C:\WINDOWS\system32\Rwad8sdv4e7V8xpKZ.dll> [File is missing]
<{108DA6C0-CFBF-41D4-9A09-C4D06AE6FFD2}><C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll> [File is missing]
<{D6129F8A-6F6E-41D7-BBC9-AC7426759CED}><C:\WINDOWS\system32\w7uds3zyayg9.dll> [File is missing]
<{A761BE8E-C15A-4DDD-A777-2C683E9E96C8}><C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll> [File is missing]
<{87DE8A1A-96C5-4420-B222-EF998F697CE7}><C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll> [File is missing]
<{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}><C:\WINDOWS\system32\122B901E.dll> [File is missing]
<{762D618C-E2CB-4217-8275-03302A93073F}><C:\WINDOWS\fonts\zEfE48cw9EmcFaR.fon> [File is missing]
<{704C3595-DB85-40F6-A601-8D6F346907BD}><C:\WINDOWS\system32\704C3595.dll> [File is missing]
<{51716C09-6B08-4CCF-B526-718E912C0573}><C:\WINDOWS\system32\PERrGx5DkqSbQdwauCRQH.dll> [File is missing]
<{1719B301-B494-4185-9379-242461F9CF02}><C:\WINDOWS\system32\BtmBAnd89jc9PsPq5EKNj.dll> [File is missing]
<{76CBCF38-0583-44C7-A1AE-D463DFE625EC}><C:\WINDOWS\system32\skcfujQ5EDN.dll> [File is missing]
<{8708994F-1758-4C2C-9A3F-FA22D6CCCB41}><C:\WINDOWS\fonts\A97CRaCB.fon> [File is missing]
<{5405A7B2-F3F5-446F-8715-2A4EF674E079}><C:\WINDOWS\system32\rfpz9wwyy2np.dll> [File is missing]
<{38FEFE05-702C-440D-AD5C-B796209A1CC5}><C:\WINDOWS\system32\Y4npJWJNr.dll> [File is missing]
<{A5CA6C70-7185-4466-AB45-B1C34E7A37CA}><C:\WINDOWS\system32\ed78ab9.dll> [File is missing]
<{BE12C98F-645D-4566-B524-DC32040B7C8A}><C:\WINDOWS\system32\eYNMAnskCCBQCc8Jp.dll> [File is missing]
<{822775B8-E45B-4E55-9325-0753A0C1DC00}><C:\WINDOWS\system32\wdGSVBqAs3Xk.dll> [File is missing]
<{B4FBFDAA-D831-4CDA-BF0D-68815CE308F0}><C:\WINDOWS\system32\HFXBt3PgtnqwHXb.dll> [File is missing]
<{44145A62-C003-4C0E-ADDE-4AB37A7FD38B}><C:\Program Files\Internet Explorer\D9.dll> [File is missing]
<{0220FBE7-F757-4C74-B246-D6703DCF1087}><C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll> [File is missing]
<{B8898C49-7B3A-4306-A9EF-8E186EDEE5EA}><C:\WINDOWS\system32\Qh6xX7VN48sVPnK.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe]
<IFEO[egui.exe]><services.exe>
在扫日志的SRENG工具》启动项目》服务》Win32服务应用程序》里面找下面项删除
[COM+ Windows System Server / WinSCCOM][Stopped/Auto Start]
<C:\WINDOWS\winsccoo.exe><(File is missing)>
在扫日志的SRENG工具》启动项目》服务》驱动程序》里面找下面项删除
[Network Monitor Protocol Driver / MyProt][Stopped/Manual Start]
<system32\DRIVERS\winyyy.sys><N/A>
[vb / vb][Stopped/Manual Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~1551562.tmp><N/A>
