我在用ewido anti-spyware杀毒，瑞星和防火墙都打不开。


已经查到两个病毒，Trojan.OnlineGames.aesj和 Not-A-Virus.Monitor.Win32.PCRecord.c
又查到一个Backdoor.Hupigon.rc
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; CNCDialer; Maxthon; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.2; .NET CLR 2.0.50727)

1.使用XDelBox删除以下文件：(XDelBox1.6下载)
说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择剪贴板导入不检查路径，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。

c:\docume~1\alluse~1\「开始~1\程序\启动\explorer.exe
c:\windows\system32\apzhbtde.dll
c:\windows\system32\cedafb.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\jdsaex.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\jhrcar.dll
c:\windows\system32\mfdesy.dll
c:\windows\system32\mndhddwd.dll
c:\windows\system32\mnmhfsrv.dll
c:\windows\system32\nhmxajkl.dll
c:\windows\system32\oswxcttb.dll
c:\windows\system32\ozfydbyt.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\tisqatyu.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\wyrsdj.dll
c:\windows\system32\ypdjfbmp.dll
c:\windows\system32\yxcschlp.dll
c:\windows\system32\zgfdet.dll
c:\windows\system32\zxmscwin.dll
c:\windows\system32\zyzxiime.dll
d:\软件包\vista\windowblinds\windowblinds\tray.dll
c:\windows\tdcbdcasys32_080526.dll
c:\windows\system32\inf\svchostc.exe
c:\windows\twftadfia16_080526.dll
c:\docume~1\admini~1\locals~1\temp\1.tmp
c:\windows\system32\d32dx9.sys

2.删除重启后使用SREng修复下面各项：

    启动项目 －－ 注册表之如下项删除：
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}]    <C:\WINDOWS\system32\wyrsdj.dll>
[{B29583D8-033A-4B9F-8553-7C5458F3FB8E}]    <C:\WINDOWS\system32\jdsaex.dll>
[{17AC9076-C898-B098-D098-A18319080971}]    <C:\WINDOWS\system32\nhmxajkl.dll>
[{18093456-9012-4568-9076-908765467181}]    <C:\WINDOWS\system32\tisqatyu.dll>
[{4A069845-2036-6084-9054-6087502480A4}]    <C:\WINDOWS\system32\ozfydbyt.dll>
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}]    <C:\WINDOWS\system32\sgrefg.dll>
[{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}]    <C:\WINDOWS\system32\jhrcar.dll>
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}]    <C:\WINDOWS\system32\rfdswc.dll>
[{84143967-B645-4BFF-B873-DA1DC886E9A7}]    <C:\WINDOWS\system32\cedafb.dll>
[{35671234-7890-ABCD-CDEF-567801237653}]    <C:\WINDOWS\system32\yxcschlp.dll>
[{841529CB-7F77-4B99-A895-B5441E0D302F}]    <C:\WINDOWS\system32\jfrwdh.dll>
[{EB71E0B3-E97D-4D30-8733-E28266467617}]    <C:\WINDOWS\system32\wyhesm.dll>
[{2D698451-2015-6358-9871-2015987452D2}]    <C:\WINDOWS\system32\apzhbtde.dll>
[{81954FAC-1023-154F-895A-1458258AD818}]    <C:\WINDOWS\system32\ypdjfbmp.dll>
[{4C648541-1025-9650-9057-6541258720C4}]    <C:\WINDOWS\system32\mndhddwd.dll>
[{9A59145F-315D-BC23-AC1F-145DF81A34A9}]    <C:\WINDOWS\system32\zyzxiime.dll>
[{6A041F13-A111-12A3-B0CF-F99818AA68A6}]    <C:\WINDOWS\system32\zxmscwin.dll>
[{DC3D30AE-0380-4151-8934-EE98A34B0370}]    <C:\WINDOWS\system32\mfdesy.dll>
[{6C8D1401-A58D-A81C-CD24-A5915C4517C6}]    <C:\WINDOWS\system32\mnmhfsrv.dll>
[{28EB3777-3E23-4E72-8449-A992D09D24C3}]    <C:\WINDOWS\system32\zgfdet.dll>
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}]    <C:\WINDOWS\system32\hfrdzx.dll>
[{33512378-9874-5641-1025-985420368733}]    <C:\WINDOWS\system32\oswxcttb.dll>
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]    <C:\WINDOWS\system32\hhrdxd.dll>
注意该项[AppInit_DLLs]修改：把<tisqatyu.dll,nhmxajkl.dll>修改为<>即清空
[nyuserinit]    <C:\WINDOWS\system32\inf\svchostc.exe C:\WINDOWS\twftadfia16_080526.dll tanlt88>
[IFEO[360safe.exe]]    <TASKMAN.EXE>
[IFEO[360safebox.exe]]    <TASKMAN.EXE>
[IFEO[360tray.exe]]    <TASKMAN.EXE>
[IFEO[avp.exe]]    <TASKMAN.EXE>
[IFEO[CCenter.exe]]    <TASKMAN.EXE>
[IFEO[Rav.exe]]    <TASKMAN.EXE>
[IFEO[RavMon.exe]]    <TASKMAN.EXE>
[IFEO[RavMonD.exe]]    <TASKMAN.EXE>
[IFEO[RavStub.exe]]    <TASKMAN.EXE>
[IFEO[RavTask.exe]]    <TASKMAN.EXE>
[IFEO[rfwcfg.exe]]    <TASKMAN.EXE>
[IFEO[rfwmain.exe]]    <TASKMAN.EXE>
[IFEO[rfwProxy.exe]]    <TASKMAN.EXE>
[IFEO[rfwsrv.exe]]    <TASKMAN.EXE>
[IFEO[rfwstub.exe]]    <TASKMAN.EXE>
[IFEO[runiep.exe]]    <TASKMAN.EXE>
[IFEO[safeboxTray.exe]]    <TASKMAN.EXE>

    启动项目 －－　启动文件夹之如下项删除：
[explorer]    <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\explorer.exe>

    启动项目 －－ 服务－－ 驱动程序之如下项禁用：
[IIS Manager  / IIS Manager ]    <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1.tmp>
[HiddFldy / HiddFldy]    <\??\C:\WINDOWS\system32\d32dx9.sys>

    系统修复－－　浏览器加载项之如下项删除：
[]    <C:\WINDOWS\system32\zyzxiime.dll>
[]    <C:\WINDOWS\system32\ypdjfbmp.dll>
[]    <C:\WINDOWS\system32\mnmhfsrv.dll>
[]    <C:\WINDOWS\system32\zxmscwin.dll>
[]    <C:\WINDOWS\system32\mndhddwd.dll>
[]    <C:\WINDOWS\system32\ozfydbyt.dll>
[]    <C:\WINDOWS\system32\yxcschlp.dll>
[]    <C:\WINDOWS\system32\oswxcttb.dll>
[]    <C:\WINDOWS\system32\apzhbtde.dll>
[]    <C:\WINDOWS\system32\tisqatyu.dll>
[]    <C:\WINDOWS\system32\nhmxajkl.dll>

下载windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip