1.建议使用XDelBox删除以下文件:(
XDelBox1.6下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\system32\srpcss.dll
c:\windows\system32\pf7kpvo.dll
zsqf.dll,ytfa.dll,ytfb.dll,ytfc.dll
;
c:\windows\system32\dpvvoxmh.dll
c:\windows\system32\msobjstl.dll
c:\windows\system32\qvyegymu.dll
c:\windows\system32\mstimewd.dll
c:\windows\system32\dndsaf.dll
c:\windows\system32\apsghjba.dll
c:\windows\system32\lweurqhx.dll
c:\windows\system32\scrruncqsj.dll
c:\windows\system32\cliconfgzx.dll
c:\windows\system32\dispexcb.dll
c:\windows\system32\adsntzt.dll
c:\windows\system32\certmgrkd.dll
c:\windows\system32\kbdswjr.dll
c:\windows\system32\bootvidgj.dll
c:\windows\system32\tscfgwmijxsj.dll
c:\windows\system32\ksuserfy.dll
c:\windows\system32\slbiopfs2.dll
c:\windows\system32\wzcfsw.dll
"c:\program files\rising\rav\ravmond.exe"
c:\windows\system32\svchost -k rpcss-->c:\windows\system32\srpcss.dll
c:\windows\system32\drivers\tx5is.sys
c:\windows\system32\drivers\qbuxe.sys
c:\documents and settings\all users\application data\microsoft\office\system\ntptdb.sys
c:\windows\system32\drivers\msiffei.sys
c:\docume~1\admini~1\locals~1\temp\1.tmp
c:\program files\microsoft office\system\apcdli.sys
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
注意该项[AppInit_DLLs]修改:把<zsqf.dll,ytfa.dll,ytfb.dll,ytfc.dll>修改为<>即清空
[ToToLook] <; >
[TkBellExe] <; >
[OODefragTray] <; >
[IMJPMIG8.1] <; >
[RfwMain] <; >
[run] <; >
[MSMSGS] <; >
[{2876D76C-CAAA-4313-AF97-8D1D9A2A1087}] <C:\WINDOWS\system32\dpvvoxmh.dll>
[{00170017-0017-0017-0017-00170017BB15}] <C:\WINDOWS\system32\msobjstl.dll>
[{00150015-0015-0015-0015-00150015BB15}] <C:\WINDOWS\system32\qvyegymu.dll>
[{00180018-0018-0018-0018-00180018BB15}] <C:\WINDOWS\system32\mstimewd.dll>
[{259BF3CF-194D-4FE6-9ADB-DE6544B098B6}] <C:\WINDOWS\system32\dndsaf.dll>
[{8FD45A54-9875-698F-E56E-65102358FDF8}] <C:\WINDOWS\system32\apsghjba.dll>
[{71A78CD4-E470-4a18-8457-E0E0283DD507}] <C:\WINDOWS\system32\lweurqhx.dll>
[{00240024-0024-0024-0024-00240024BB15}] <C:\WINDOWS\system32\scrruncqsj.dll>
[{7A6DF30E-D0F2-446f-B4F0-BF4232D60E07}] <C:\WINDOWS\system32\cliconfgzx.dll>
[{00060006-0006-0006-0006-00060006BB15}] <C:\WINDOWS\system32\dispexcb.dll>
[{E0F3526A-4165-4589-80CD-50B6FBAC3BDA}] <C:\WINDOWS\system32\adsntzt.dll>
[{9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5}] <C:\WINDOWS\system32\certmgrkd.dll>
[{432BDC7C-DE5B-43f4-AA81-E7F8AFB0182D}] <C:\WINDOWS\system32\kbdswjr.dll>
[{D3112B69-A745-4805-874E-ABD480EA1299}] <C:\WINDOWS\system32\bootvidgj.dll>
[{2CB77746-8ECC-40ca-8217-10CA8BE5EFC8}] <C:\WINDOWS\system32\tscfgwmijxsj.dll>
[{00130013-0013-0013-0013-00130013BB15}] <C:\WINDOWS\system32\ksuserfy.dll>
[{00250025-0025-0025-0025-00250025BB15}] <C:\WINDOWS\system32\slbiopfs2.dll>
[{28766E1C-74B0-4417-8C75-F12AE309EF35}] <C:\WINDOWS\system32\wzcfsw.dll>
[dpvvoxmh.dll] <C:\WINDOWS\system32\dpvvoxmh.dll>
[msobjstl.dll] <C:\WINDOWS\system32\msobjstl.dll>
[qvyegymu.dll] <C:\WINDOWS\system32\qvyegymu.dll>
[mstimewd.dll] <C:\WINDOWS\system32\mstimewd.dll>
[lweurqhx.dll] <C:\WINDOWS\system32\lweurqhx.dll>
[scrruncqsj.dll] <C:\WINDOWS\system32\scrruncqsj.dll>
[cliconfgzx.dll] <C:\WINDOWS\system32\cliconfgzx.dll>
[dispexcb.dll] <C:\WINDOWS\system32\dispexcb.dll>
[adsntzt.dll] <C:\WINDOWS\system32\adsntzt.dll>
[certmgrkd.dll] <C:\WINDOWS\system32\certmgrkd.dll>
[kbdswjr.dll] <C:\WINDOWS\system32\kbdswjr.dll>
[bootvidgj.dll] <C:\WINDOWS\system32\bootvidgj.dll>
[tscfgwmijxsj.dll] <C:\WINDOWS\system32\tscfgwmijxsj.dll>
[ksuserfy.dll] <C:\WINDOWS\system32\ksuserfy.dll>
[slbiopfs2.dll] <C:\WINDOWS\system32\slbiopfs2.dll>
启动项目 -- 服务 -- Win32服务应用程序之如下项禁用:
[Rising RealTime Monitor / RsRavMon] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe">
[Remote Procedure Call (RPC) / RpcSs] <C:\WINDOWS\system32\svchost -k rpcss-->C:\WINDOWS\system32\srpcss.dll>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[tx5i / tx5is] <\SystemRoot\System32\DRIVERS\tx5is.sys>
[qbuxe / qbuxe] <\SystemRoot\system32\drivers\qbuxe.sys>
[ntptdb / ntptdb] <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\ntptdb.sys>
[msiffei / msiffei] <System32\Drivers\msiffei.sys>
[IIS Manager / IIS Manager ] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1.tmp>
[apcdli / apcdli] <\??\C:\Program Files\Microsoft Office\SYSTEM\apcdli.sys>
清理后卸载瑞星重新安装