下载XDelBox1.7)删除以下文件
http://www.dodudou.com/down/index.phpC:\WINDOWS\system32\msosiocp.dll
C:\WINDOWS\system32\NpOpenStore.dll
C:\WINDOWS\system32\NPCard.dll
C:\WINDOWS\system32\RsaFun.dll
C:\WINDOWS\system32\GPKPCSC.dll
c:\windows\system32\vmvreg32.dll
C:\DOCUME~1\CHANGC~1\LOCALS~1\Temp\tmp22.tmp
c:\windows\system32\Drivers\Wsdrv.sys
C:\WINDOWS\system32\mpwdbapi.dll
C:\WINDOWS\system32\mndhbdwd.dll
C:\WINDOWS\system32\mpmycapi.dll
C:\WINDOWS\system32\Zpar.dll
C:\WINDOWS\system32\Ildeh.dll
C:\WINDOWS\system32\Cuqrqs.dll
C:\WINDOWS\system32\Svay.dll
C:\WINDOWS\system32\Ckkc.dll
C:\Program Files\Internet Explorer\PLUGINS\NewSys32.Sys
C:\WINDOWS\system32\ypdjebmp.dll
C:\WINDOWS\system32\Czrh.dll
C:\WINDOWS\system32\Ixukn.dll
C:\WINDOWS\system32\Gqig.dll
C:\WINDOWS\system32\Dmrvw.dll
==================================
打开SRE --启动项目
注册表
删除所有IFEO项
==================================
删除服务
[Security Control / secctrl][Stopped/Auto Start]
<c:\windows\system32\rundll32.exe vmvreg32.dll,scan><Microsoft Corporation>
==================================
删除驱动程序
[mxfp / mxfp][Stopped/Auto Start]
<\??\C:\DOCUME~1\CHANGC~1\LOCALS~1\Temp\tmp22.tmp><N/A>
[SyGate for NT, Wsdrv / Wsdrv][Running/Boot Start]
<\SystemRoot\\SystemRoot\SYSTEM32\Drivers\Wsdrv.sys><N/A>
==================================
删除浏览器加载项
[]
{25694105-5108-9405-3695-954187462152} <C:\WINDOWS\system32\mpwdbapi.dll, N/A>
[]
{2C648541-1025-9650-9057-6541258720C2} <C:\WINDOWS\system32\mndhbdwd.dll, N/A>
[]
{3629FF4F-ACDB-5C90-A098-FACB3456A263} <C:\WINDOWS\system32\mpmycapi.dll, N/A>
[]
{36888495-7B15-4BB3-8E4E-27E6086A8B9B} <C:\WINDOWS\system32\Zpar.dll, N/A>
[]
{3B03E1B0-4289-4A8E-873C-6F0BBC7E7CF8} <C:\WINDOWS\system32\Ildeh.dll, N/A>
[]
{4209E908-DE3F-433E-B210-16EB7A4A6EFF} <C:\WINDOWS\system32\Cuqrqs.dll, N/A>
[]
{447498EF-2125-43E2-9A33-F4E45DF92FEF} <C:\WINDOWS\system32\Svay.dll, N/A>
[]
{47DFEE1F-A45F-45E5-9157-3EF2FCC35B0A} <C:\WINDOWS\system32\Ckkc.dll, N/A>
[]
{69F268D1-2A51-4EE6-954F-7DEFA888852F} <C:\Program Files\Internet Explorer\PLUGINS\NewSys32.Sys, N/A>
[]
{71954FAC-1023-154F-895A-1458258AD817} <C:\WINDOWS\system32\ypdjebmp.dll, N/A>
[]
{BC44F383-093D-4F03-93C8-34439E8E829C} <C:\WINDOWS\system32\Czrh.dll, N/A>
[]
{C2FE4E65-E56B-469C-A12C-BE73B408C4E7} <C:\WINDOWS\system32\Ixukn.dll, N/A>
[]
{F9A12B8E-55BC-42CF-9933-D1315CAF025A} <C:\WINDOWS\system32\Gqig.dll, N/A>
[]
{FF194398-980B-409B-91DB-65C1A0AD7E83} <C:\WINDOWS\system32\Dmrvw.dll, N/A>
==================================
下载windows清理助手清理下
http://www.arswp.com/download.html还有问题,再扫个日志上来