1.用XDelBox勾选抑制再生后删除以下文件:(
XDelBox1.7支持奥运版下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择
从剪贴板导入不检查路径,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\docume~1\admini~1\locals~1\temp\is-gcvrs.tmp\httpdown.exe
c:\windows\system32\aaaaaa.dll
c:\windows\system32\ffffff.dll
c:\windows\system32\llllll.dll
c:\windows\system32\msosdror00.dll
c:\windows\system32\pppppp.dll
c:\windows\system32\qqqqqq.dll
c:\windows\system32\tttttt.dll
c:\windows\system32\vvvvvv.dll
c:\windows\system32\wwwwww.dll
c:\windows\system32\ytewcxzsw.dll
c:\program files\internet explorer\plugins\dossys08.sys
c:\windows\system32\kcomc32.dll
c:\windows\system32\anistio.dll
c:\windows\system32\bincdwsa.dll
c:\windows\system32\dionpis.dll
c:\windows\system32\eeeeee.dll
c:\windows\system32\fewqickd.dll
c:\windows\system32\fmbiost.dll
c:\windows\system32\fmsbbqi.dll
c:\windows\system32\fmsjhif.dll
c:\windows\system32\hefcndy.dll
c:\windows\system32\isscs32.dll
c:\windows\system32\nmhgtce.dll
c:\windows\system32\ptshell.dll
c:\windows\system32\rzysdhbx.dll
c:\windows\system32\ticisms.dll
c:\windows\system32\yuibbct.dll
c:\docume~1\admini~1\locals~1\temp\is-gcvrs.tmp\plg47.tmp
c:\windows\system32\mmmhxggd1062.dll
c:\windows\system32\mmhadpqg1091.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\mmbaikok1092.dll
c:\windows\system32\zgfdet.dll
c:\windows\system32\mmkafnfw1097.dll
c:\windows\system32\fedadh.dll
c:\windows\system32\fmcvxy.dll
c:\windows\system32\wyrsdj.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\jhrcar.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\jhfrxz.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\zjydcx.dll
c:\windows\system32\mfdesy.dll
c:\windows\system32\zgxfdx.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\wrqszl.dll
c:\windows\system32\tdffdl.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\wzcfsw.dll
c:\windows\system32\wwwwww.dll
c:\windows\system32\msosdror00.dll
c:\windows\system32\msosdohs00.dll
c:\windows\system32\msosmnsf01.dll
c:\windows\system32\msosmhfp01.dll
c:\windows\system32\nicozftp00.dll
c:\windows\system32\ffffff.dll
c:\windows\system32\qqqqqq.dll
c:\windows\system32\aaaaaa.dll
c:\windows\system32\vvvvvv.dll
c:\windows\system32\ytewcxzsw.dll
c:\windows\system32\llllll.dll
c:\windows\system32\tttttt.dll
c:\windows\system32\pppppp.dll
c:\windows\system32\eeeeee.dll
c:\windows\system32\kcomc32.exe
c:\winpenjr\win32\pphidpad.exe
c:\windows\isscs32.exe
c:\windows\eeeeee.exe
c:\windows\fewqickd.exe
c:\windows\yuibbct.exe
c:\windows\nmhgtce.exe
c:\windows\gwsmhxuq.exe
taskman.exe
c:\docume~1\admini~1\locals~1\temp\tmpc.tmp
c:\windows\system32\drivers\msosmsfpfis64.sys
c:\docume~1\admini~1\locals~1\temp\tmp9.tmp
c:\docume~1\admini~1\locals~1\temp\tmp2.tmp
c:\docume~1\admini~1\locals~1\temp\2.sys
c:\windows\system32\drivers\hdv32_c.sys
c:\docume~1\admini~1\locals~1\temp\tmp16.tmp
c:\docume~1\admini~1\locals~1\temp\tmp9.tmp
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[{d592daa6-9b5e-416d-973a-d76c53183e7e}]
[{8AD0F1B1-990D-4F52-A33D-2837E43CEF58}]
[{8c3dd05d-a6a1-4cb5-a714-94be3c3b4cd0}]
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}]
[{18e64250-19a8-4d10-828f-30e101a22291}]
[{28EB3777-3E23-4E72-8449-A992D09D24C3}]
[{d6763cab-b46e-4f7f-8347-6f098a83a164}]
[{27D89EDA-2197-4DFC-B3DC-AF22C6CA23BB}]
[{73AE86E6-7F03-4C3B-8980-FB1DA157D3C7}]
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}]
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}]
[{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}]
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}]
[{7914E0AA-ECCB-4311-B584-C49538227824}]
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}]
[{DC3D30AE-0380-4151-8934-EE98A34B0370}]
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}]
[{841529CB-7F77-4B99-A895-B5441E0D302F}]
[{F99DEFDD-200B-4410-B572-E90883D527D2}]
[{C0595A7E-2E2F-4B34-A83A-019270A0A464}]
[{EB71E0B3-E97D-4D30-8733-E28266467617}]
[{28766E1C-74B0-4417-8C75-F12AE309EF35}]
注意该项[AppInit_DLLs]修改:把<wwwwww.dll,msosdror00.dll,msosdohs00.dll,msosmnsf01.dll,msosmhfp01.dll,nicozftp00.dll,ffffff.dll,qqqqqq.dll,aaaaaa.dll,vvvvvv.dll,ytewcxzsw.dll,llllll.dll,tttttt.dll,pppppp.dll,eeeeee.dll,ieprot.dll>修改为<>即清空
[kcomc]
[PPHIDPAD]
[isscs32]
[ytewcxzsw]
[fewqickd]
[yuibbct]
[nmhgtce]
[igzwzslm]
[IFEO[QQDoctorMain.exe]]
[IFEO[SelfUpdate.exe]]
启动项目 -- 服务-- 驱动程序之如下项删除:
[zftp / zftp]
[msfpfis64 / msfpfis64]
[mnsf / mnsf]
[mhfp / mhfp]
[internet service / internet service]
[Hdv32 / Hdv32]
[dror / dror]
[dohs / dohs]
系统修复-- 浏览器加载项之如下项删除:
[] <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>
做完下载以下软件清理一次并更新杀毒软件至最新进行全盘杀毒一次
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe 用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml 下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip