HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{EE12D60D-AD9A-4095-B839-3BE6862679FD}
[AM] 43. c:\program files\internet explorer\iexplore32.dat
{A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}
[AM] 44. c:\program files\internet explorer\iexplore32.win
{C5E87A05-F463-4841-B19E-DD3EC3862368}
[AM] 45. c:\program files\internet explorer\iexplore32.sys
删掉上面的注册表值项。
删除以下文件：
c:\autorun.inf
c:\hide.exe
d:\autorun.inf
d:\hide.exe
e:\autorun.inf
e:\hide.exe
c:\program files\internet explorer\iexplore32.sys
c:\program files\internet explorer\iexplore32.dat
c:\program files\internet explorer\iexplore32.win
