先清除D\E\F盘下的Autorun.inf和explorer.pif（右键资源管理器中清除）1.建议使用XDelBox删除以下文件：(
XDelBox1.6 网盘下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择 剪贴板导入不检查路径，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。
c:\windows\system32\hhrdxd.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\ttqacqac1032.dll
c:\windows\system32\aysadsad1032.dll
c:\windows\system32\wyrsdj.dll
c:\program files\internet explorer\plugins\newsys55.sys
c:\windows\system32\jhfrxz.dll
c:\windows\system32\zgxfdx.dll
c:\windows\system32\wrqszl.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\zjydcx.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\zgfdet.dll
c:\docume~1\admini~1\locals~1\temp\tmp1a.tmp
c:\docume~1\admini~1\locals~1\temp\tmp15.tmp
2.删除重启后使用SREng修复下面各项： 启动项目 －－ 注册表之如下项删除：
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}] <C:\WINDOWS\system32\hhrdxd.dll>
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}] <C:\WINDOWS\system32\hfrdzx.dll>
[{5ac6d3c3-f564-407e-9c4b-ce4b6cd3f9ac}] <C:\WINDOWS\system32\ttQACQAC1032.dll>
[{b4d47a00-9d9c-4272-96e1-620385045b02}] <C:\WINDOWS\system32\aySADSAD1032.dll>
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}] <C:\WINDOWS\system32\wyrsdj.dll>
[{D29DCEE0-457B-45A2-A92D-741B95B7723B}] <C:\Program Files\Internet Explorer\PLUGINS\NewSys55.Sys>
[{7914E0AA-ECCB-4311-B584-C49538227824}] <C:\WINDOWS\system32\jhfrxz.dll>
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}] <C:\WINDOWS\system32\zgxfdx.dll>
[{F99DEFDD-200B-4410-B572-E90883D527D2}] <C:\WINDOWS\system32\wrqszl.dll>
[{EB71E0B3-E97D-4D30-8733-E28266467617}] <C:\WINDOWS\system32\wyhesm.dll>
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}] <C:\WINDOWS\system32\zjydcx.dll>
[{841529CB-7F77-4B99-A895-B5441E0D302F}] <C:\WINDOWS\system32\jfrwdh.dll>
[{28EB3777-3E23-4E72-8449-A992D09D24C3}] <C:\WINDOWS\system32\zgfdet.dll>
注意该项[AppInit_DLLs]修改：把<mrjhtjd.dll,qrhhb.dll,xdfntt.dll,hgfhk.dll,hjaiq.dll,kduy.dll,frntrn.dll,dnteh.dll,chmfcmh.dll,jwlah.dll,crugd.dll,lariytrz.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,ydgn.dll,dbfb.dll,fjnbv.dll,wmsat.dll,gmnait.dll,hfjg.dll,xdndn.dll,rgfjj.dll,dscef.dll,xfng.dll,njritc.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,fehom.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,rhs.dll,atehhz.dll,gjjte.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,hkfgh.dll,drghszd.dll,fngn.dll,xdhdg.dll,zdbfbd.dll,fjyjy.dll,awef.dll,msepbe.dll,ieprot.dll>修改为<>即清空
启动项目 －－ 服务－－ 驱动程序之如下项禁用：
[ping / ping] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1A.tmp>
[mhfp / mhfp] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp15.tmp>
系统修复－－ 浏览器加载项之如下项删除：
[] <C:\Program Files\Internet Explorer\PLUGINS\NewSys55.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\NewSys55.Sys>
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe
用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml
下载windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip
