问题众多。
一、有问题的注册表项目
（一）要删除的注册表项目如下：
HKLM\System\CurrentControlSet\Services
<BaiduGoogleYahooSearch>
<sysloader> HKLM\System\CurrentControlSet\Services
<cnprov>
<NPF>
<q35smjyl2>
<vn7eahgtv4>
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
{C86488AF-13D5-4FEF-9DDF-9FB88698CFC1}
{D44CDB79-247B-4C3A-9FEC-20C0B2B7F298}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{1859245F-345D-BC13-AC4F-145D47DA34F1}
{2A1247C1-53DA-FF43-ABD3-345F323A48D2}
{1960356A-458E-DE24-BD50-268F589A56A1}
{352D2432-37A2-324F-2A54-21BF5CF2F1A3}
{2B95BA5C-DE5F-9901-8843-FFD133A148B2}
{37D81718-1314-5200-2597-587901018073}
{2C87A354-ABC3-DEDE-FF33-3213FD7447C2}
{2D47B341-43DF-4563-753F-345FFA3157D2}
{1A321487-4977-D98A-C8D5-6488257545A1}
{26650011-3344-6688-4899-345FABCD1562}
{1E32FA58-3453-FA2D-BC49-F340348ACCE1}
{12FAACDE-34DA-CCD4-AB4D-DA34485A3421}
{0EA66AD2-CF26-2E23-532B-B292E22F3266}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
<WinSys>
<KVP>
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
<visin>
（二）要修改的注册表项如下
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
<AppInit_DLLs>
二、有问题的文件如下
c:\windows\ig.exe
c:\windows\system32\drivers\svchost.exe
c:\windows\system32\visin.exe
c:\autorun.inf
c:\pegefile.pif
d:\autorun.inf
d:\pegefile.pif
e:\autorun.inf
e:\pegefile.pif
f:\autorun.inf
f:\pegefile.pif
c:\documents and settings\all users\application data\microsoft\office\system\loader.dll
c:\windows\system32\9or6cncz.dll
c:\windows\system32\avzxamn.dll
c:\windows\system32\avwsbmn.dll
c:\windows\system32\avwgbmn.dll
c:\windows\system32\avwlamn.dll
c:\windows\system32\bgkqwchmsydjpu.dll
c:\program files\common files\microsoft shared\ink\penchs.dll
c:\windows\system32\jhbpri.dll
c:\windows\system32\avwsbmn.dll
c:\windows\system32\kapjazy.dll
c:\windows\system32\kaqhczy.dll
c:\windows\system32\kvdxbma.dll
c:\windows\system32\kvmxbma.dll
c:\windows\system32\mrxcjpua.dll
c:\windows\system32\ratbbpi.dll
c:\windows\system32\rsmyapm.dll
c:\windows\system32\rsjzapm.dll
c:\windows\system32\sxchntydjp.exe
c:\windows\system32\vbinwcin.dll
c:\program files\internet explorer\plugins\newtemp.dll
c:\documents and settings\all users\application data\microsoft\office\userdata\webbrowser_3101.dll
c:\windows\system32\drivers\vn7eahgtv4.sys
c:\windows\system32\drivers\q35smjyl2.sys
c:\windows\system32\drivers\npf.sys
c:\windows\system32\drivers\cnprov.sys
c:\documents and settings\all users\application data\microsoft\office\system\sysloader.exe红色的注册表项目和文件为不确定项，请把c:\documents and settings\all users\application data\microsoft\office\system\sysloader.exe这个文件压缩后发给流星版主鉴定。
