下载雨林木风PE安装包http://down.7xdown.com/downzh/TonPE_V1.4.rar 下载完后安装，以防勿操作删除文件后的修复。1.这一步很重要：复制c:\windows\system32\dllcache\explorer.exe替换c:\windows\explorer.exe
2.用XDelBox勾选抑制再生后删除以下文件：(
XDelBox1.7支持奥运版下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择
从剪贴板导入不检查路径，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
c:\program files\120.exe
c:\windows\system32\703dc6ec.dll
c:\windows\system32\msosdohs00.dll
c:\windows\system32\msosping00.dll
c:\windows\system32\fdght.dll
c:\windows\system32\gjjte.dll
c:\windows\system32\hfjg.dll
c:\windows\system32\rdthr.dll
c:\windows\system32\xgnfn.dll
c:\windows\temp\dat13.tmp
c:\program files\internet explorer\plugins\nt_sys32.sys
c:\windows\system32\jdsaex.dll
c:\windows\system32\anistio.dll
c:\windows\system32\bincdwsa.dll
c:\windows\system32\dndsioc.dll
c:\windows\system32\dqbaibai1067.dll
c:\windows\system32\dqmhxmhx1035.dll
c:\windows\system32\dqsadsad1042.dll
c:\windows\system32\fiosectc.dll
c:\windows\system32\fmsbbqi.dll
c:\windows\system32\fmsjhif.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\jhfrxz.dll
c:\windows\system32\mfchlp64.dll
c:\windows\system32\mfdesy.dll
c:\windows\system32\mxavpw0.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\sperls.dll
c:\windows\system32\sqavpw0.dll
c:\windows\system32\tdffdl.dll
c:\windows\system32\ttdxydxy1013.dll
c:\windows\system32\ttdxydxy1014.dll
c:\windows\system32\tthadhad1071.dll
c:\windows\system32\ttkafkaf1071.dll
c:\windows\system32\ttmysmys1053.dll
c:\windows\system32\ttnnbnnb1056.dll
c:\windows\system32\ttrjrrjr1029.dll
c:\windows\system32\wfrdvq.dll
c:\windows\system32\wyrsdj.dll
c:\windows\system32\zgxfdx.dll
c:\windows\system32\zjydcx.dll
c:\windows\system32\zxmsawin.dll
c:\windows\mfchlp64.exe
c:\windows\dndsioc.exe
c:\windows\fmsbbqi.exe
c:\windows\system32\a5daaf9c.exe
c:\documents and settings\robin hood\桌面\kbasezs.sys
c:\windows\temp\tmp4.tmp
c:\windows\temp\tmp28.tmp
c:\windows\system32\drivers\msosmsfpfis64.sys
c:\windows\temp\tmp4.tmp
3.删除重启后使用SREng修复下面各项： 启动项目 －－ 注册表之如下项删除：
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}]
[{B29583D8-033A-4B9F-8553-7C5458F3FB8E}]
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}]
[{7914E0AA-ECCB-4311-B584-C49538227824}]
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}]
[{7FA4A83B-F99A-4bfc-A8E2-6A62B05D2C82}]
[{3E387664-C799-4D62-B196-25776EF35C51}]
[{C36ECF8F-EAD9-44BD-8DD0-C4240A06F51C}]
[{3c0a13c5-4df0-4430-9718-bf99ff81334a}]
[{a580305f-b902-4723-ac26-06e4cb4279a5}]
[{8ccdf465-f6db-4ba5-b338-7cb13b339a0d}]
[{cd261631-9220-451c-903f-95bbbf541387}]
[{4b571e62-35e7-43ea-8b18-d4957b179234}]
[{9947e423-193f-4fc4-b38d-e76fdd799150}]
[{d70eb86c-312a-48d5-a89f-0c1f4b75cc72}]
[{3cc67dc4-e953-4b2f-ae22-fcb4dcc3903a}]
[{4A041F13-A111-12A3-B0CF-F99818AA68A4}]
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}]
[{5fd0c12b-da0b-4446-82fd-b8041a46492b}]
注意该项[AppInit_DLLs]修改：把<ghynjr.dll,dgxsrr.dll,dfhtrhy.dll,ghjkdr.dll,sefawe.dll,frntrn.dll,qrhhb.dll,drghszd.dll,fngn.dll,gjjte.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,xdndn.dll,xdfntt.dll,hgfhk.dll,dnteh.dll,xfng.dll,njritc.dll,chmfcmh.dll,jwlah.dll,gmnait.dll,hfjg.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,dgxsrr.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,ydgn.dll,dbfb.dll,fjnbv.dll,ghjdtry.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,xdhdg.dll,rhs.dll,mrjhtjd.dll,zdbfbd.dll,fjyjy.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,rdthr.dll,rgfjj.dll,dscef.dll,crugd.dll,lariytrz.dll,hjaiq.dll,kduy.dll,hkfgh.dll,awef.dll,dfhsh.dll,ethsh.dll,stehs.dll,sthth.dll,wfhyt.dll,rgghjj.dll,fdght.dll,,msosmhfp00.dll>修改为<>即清空
[mfchlp64]
[dndsioc]
[fmsbbqi]
启动项目 －－ 服务 －－ Win32服务应用程序之如下项删除：
[6CCD2D53 / 6CCD2D53]
启动项目 －－ 服务－－ 驱动程序之如下项删除：
[KBaseZS / KBaseZS]
[mhfp / mhfp]
[ping / ping]
[msfpfis64 / msfpfis64]
[dohs / dohs]
系统修复－－ 浏览器加载项之如下项删除：
[] <C:\WINDOWS\system32\zxmsawin.dll>
[] <C:\WINDOWS\system32\zxmsawin.dll>
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe 用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml 下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip
