天哪，木马群~
用附件的XDELBOX删除文件
C:\WINDOWS\system32\cwjlgw.dll
C:\WINDOWS\system32\cvhntb.dll
C:\WINDOWS\system32\mypquq.dll
C:\WINDOWS\system32\ujxnsd.dll
C:\WINDOWS\system32\pxoiyn.dll
C:\WINDOWS\system32\rjbrbq.dll
C:\WINDOWS\system32\hrxgyn.dll
C:\WINDOWS\system32\pwswhb.dll
C:\WINDOWS\system32\wscjym.dll
C:\WINDOWS\system32\xqlkxd.dll
C:\WINDOWS\system32\umozju.dll
C:\WINDOWS\system32\jeheys.dll
C:\WINDOWS\system32\eexdeb.dll
C:\WINDOWS\system32\wipicdec.dll
C:\WINDOWS\system32\ruobao.dll
C:\WINDOWS\system32\kaoczg.dll
C:\WINDOWS\system32\msoscqet00.dll
C:\WINDOWS\system32\msosptfs00.dll
C:\WINDOWS\system32\msosfmsq01.dll
C:\WINDOWS\system32\msosping00.dll
C:\WINDOWS\system32\msosjtfo01.dll
C:\WINDOWS\system32\yyyyyy.dll
C:\WINDOWS\system32\msosjtio00.dll
C:\WINDOWS\system32\msoscqit00.dll
C:\WINDOWS\system32\ytewcxzsw.dll
C:\WINDOWS\system32\xsdvbo.dll
C:\WINDOWS\system32\uwkgum.dll
C:\WINDOWS\system32\uzxwig.dll
C:\WINDOWS\system32\koilnk.dll
C:\WINDOWS\system32\msosfasq00.dll
C:\WINDOWS\system32\qpyodo.dll
C:\WINDOWS\system32\msosdrop00.dll
C:\WINDOWS\system32\msoscqet01.dll
C:\WINDOWS\system32\msosptfs01.dll
C:\WINDOWS\system32\msosping01.dll
C:\WINDOWS\system32\msosfasq01.dll
C:\WINDOWS\system32\msosjtfo00.dll
C:\WINDOWS\system32\msosdrop01.dll
C:\77eb48608ced6553.dat
C:\WINDOWS\system32\drivers\msosmsfpfis64.sys
C:\WINDOWS\system32\drivers\msosmsp2p32.sys
复制他们，从剪贴板导入，点上抑制再生，右键点击要删除的文件列表，选择立即重起删除
重起以后进入XDELBOX工具，执行删除~
删除过后，打开SRENG
注册表中删除
<ytewcxzsw><C:\WINDOWS\ytewcxzsw.exe> []
<anistio><C:\WINDOWS\anistio.exE> []
<dionpis><C:\WINDOWS\dionpis.exe> []
<hefcndy><C:\WINDOWS\hefcndy.exe> []
<fmsbbqi><C:\WINDOWS\fmsbbqi.exe> []
<bincdwsa><C:\WINDOWS\bincdwsa.exe> []
<dbhlp32><C:\WINDOWS\dbhlp32.exe> []
<fmsjhif><C:\WINDOWS\fmsjhif.exe> []
<zwzjfntk><C:\WINDOWS\wjnkdnwg.exe> []
<ptshell><C:\WINDOWS\ptshell.exe> []
<tciocp64><C:\WINDOWS\tciocp64.exe> []
<ticisms><C:\WINDOWS\ticisms.exe> []
<mfchlp64><C:\WINDOWS\mfchlp64.exe> []
<WINSvr64><C:\WINDOWS\WINSvr64.exe> []
<fmbiost><C:\WINDOWS\fmbiost.exe> []
<wipicdec><C:\WINDOWS\wipicdec.exe> []
<isndntio><C:\WINDOWS\isndntio.exe> []
<huifitc><C:\WINDOWS\huifitc.exe> []
<wrew2ds><C:\WINDOWS\wrew2ds.exe> []
<fmcbbqi><C:\WINDOWS\fmcbbqi.exe> []
<bitcdwsa><C:\WINDOWS\bitcdwsa.exe> []
<juejwcx><C:\WINDOWS\juejwcx.exe> []
<msioSvr64><C:\WINDOWS\msioSvr64.exe> []
<nbnwewd><C:\WINDOWS\nbnwewd.exe> []
<uiwcaqws><C:\WINDOWS\uiwcaqws.exe> []
编辑 <AppInit_DLLs><SysDaJcHv.dll,hrxgyn.dll,qpyodo.dll,xqlkxd.dll,eexdeb.dll,jeheys.dll,cwjlgw.dll,ruobao.dll,kaoczg.dll,cvhntb.dll,mypquq.dll,ujxnsd.dll,pxoiyn.dll,rjbrbq.dll,pwswhb.dll,wscjym.dll,wipicdec.dll,umozju.dll,wwwwww.dll,msosping01.dll,koilnk.dll,hxwtem.dll,uwkgum.dll,ytewcxzsw.dll,yyyyyy.dll,msoscqet01.dll,uzxwig.dll,nicozctp01.dll,xsdvbo.dll,msosptfs01.dll,msoscqit00.dll,msosjtio00.dll,msosdrop01.dll,nicozftp00.dll,msosmnsf01.dll,msosfasq01.dll,msosmhfp00.dll,msosmhap01.dll,msosfmsq01.dll,msosjtfo00.dll,msosdohs00.dll,iouwxg.dll> [Microsoft Corporation]为空
<AppInit_DLLs><> [Microsoft Corporation]
删除驱动
[77eb48608ced6553 / 77eb48608ced6553][Stopped/Manual Start]
<\??\C:\77eb48608ced6553.dat><N/A>
[cqet / cqet][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1A.tmp><N/A>
[cqit / cqit][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp8.tmp><N/A>
[dohs / dohs][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp8.tmp><N/A>
[drop / drop][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp29.tmp><N/A>
[fasq / fasq][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp25.tmp><N/A>
[fmsq / fmsq][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp10.tmp><N/A>
[jtfo / jtfo][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1E.tmp><N/A>
[jtio / jtio][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp12.tmp><N/A>
[mhap / mhap][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1.tmp><N/A>
[mhfp / mhfp][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1.tmp><N/A>
[mnsf / mnsf][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmpA.tmp><N/A>
[msfpfis64 / msfpfis64][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\msosmsfpfis64.sys><N/A>
[msp2p32 / msp2p32][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\msosmsp2p32.sys><N/A>
[ping / ping][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmpE.tmp><N/A>
[ptfs / ptfs][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmpC.tmp><N/A>
[zctp / zctp][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp10.tmp><N/A>
[zftp / zftp][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp4.tmp><N/A>
下载arswp(Windows清理助手)清理下..
http://www.arswp.com/download/arswp/arswp.rar清理临时文件夹:
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空下列临时文件夹中所有内容：
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
C:\WINDOWS\TEMP
安全卫士360下载：
http://www.skycn.com/soft/21730.html这个工具也清理一下
