这一步很重要：先下载附件，解压后复制里面的 explorer.exe 文件粘贴到c:\windows\文件夹内，提示替换时选“是”。1.建议使用XDelBox删除以下文件：(
XDelBox1.6下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
c:\windows\system32\cyph26.exe
c:\windows\system32\jnex25.exe
c:\windows\system32\aaaaaa.dll
c:\windows\system32\bbbbbb.dll
c:\windows\system32\cccccc.dll
c:\windows\system32\dddddd.dll
c:\windows\system32\eeeeee.dll
c:\windows\system32\ffffff.dll
c:\windows\system32\gggggg.dll
c:\windows\system32\hhhhhh.dll
c:\windows\system32\iiiiii.dll
c:\windows\system32\jjjjjj.dll
c:\windows\system32\kkkkkk.dll
c:\windows\system32\llllll.dll
c:\windows\system32\mmmmmm.dll
c:\windows\system32\mmwlangh1005.dll
c:\windows\system32\nnnnnn.dll
c:\windows\system32\oooooo.dll
c:\windows\system32\pppppp.dll
c:\windows\system32\qqqqqq.dll
c:\windows\system32\rrrrrr.dll
c:\windows\system32\ssssss.dll
c:\windows\system32\tttttt.dll
c:\windows\system32\uuuuuu.dll
c:\windows\system32\vvvvvv.dll
c:\windows\system32\wipxcdec.dll
c:\windows\system32\wwwwww.dll
c:\windows\system32\xxxxxx.dll
c:\windows\system32\ytewcxzsw.dll
c:\windows\system32\yyyyyy.dll
c:\windows\system32\zzzzzz.dll
c:\windows\system32\hray22.exe
c:\windows\system32\wkky20.exe
c:\windows\system32\lvjz16.exe
c:\windows\system32\oynp12.exe
c:\windows\system32\dcjs9.exe
c:\windows\system32\dbty7.exe
c:\windows\conime.exe
c:\windows\system32\dbi100.dll
c:\progra~1\cnrn\cnrn.dll
c:\progra~1\cnrn\rnhelper.dll
c:\progra~1\cnrn\rnlist.dll
c:\progra~1\tencent\ssplus\splus.dll
c:\progra~1\yahoo!\assist~1\yhelper.dll
c:\program files\internet explorer\plugins\dossys08.sys
c:\windows\system32\ddserh.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\mfdesy.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\wzcfsw.dll
c:\windows\system32\zefdst.dll
c:\progra~1\cnrn\rnmain.exe
c:\progra~1\cnrn\rnaxtf.dll
c:\progra~1\cnrn\rnlive.dll
c:\progra~1\cnrn\rnntfy.dll
c:\windows\system32\mmbaikok1092.dll
c:\windows\system32\mmhadpqg1091.dll
c:\windows\system32\mmkafnfw1100.dll
c:\windows\system32\mmmhxggd1062.dll
c:\windows\system32\explorer.exe
c:\progra~1\cnrn\rnevent.dll
c:\progra~1\yahoo!\assist~1\yalive.dll
c:\progra~1\yahoo!\assist~1\yalliveex.dll
c:\windows\system32\anistio.dll
c:\windows\system32\bincdwsa.dll
c:\windows\system32\dionpis.dll
c:\windows\system32\fmbiost.dll
c:\windows\system32\juejwcx.dll
c:\windows\system32\kplriqih.dll
c:\windows\system32\nmhgtce.dll
c:\windows\system32\yuiabct.dll
c:\progra~1\yahoo!\assist~1\ylive.exe
c:\program files\idnkw\cnups.dll
c:\docume~1\hp\locals~1\temp\rtkbtmnt.exe
c:\progra~1\baidu\bar\baidubar.dll
c:\progra~1\cnrn\rnextend.dll
c:\progra~1\idnkw\cnbho.dll
c:\progra~1\idnkw\cnups.dll
c:\progra~1\yahoo!\assist~1\yscrblock.dll
c:\windows\system32\ssup.dll
c:\windows\system32\msosmnsf00.dll
c:\windows\system32\msosmnsf01.dll
c:\windows\system32\msosmnsf02.dll
c:\windows\yuiabct.exe
c:\windows\fmbiost.exe
c:\windows\bincdwsa.exe
c:\windows\dionpis.exe
c:\windows\anistio.exe
c:\windows\rewkljlpw.exe
c:\windows\hgeazpkc.exe
c:\windows\fmcbbqi.exe
c:\windows\juejwcx.exe
c:\windows\msiosvr64.exe
c:\windows\fmschif.exe
c:\windows\ytewcxzsw.exe
c:\windows\fewqickd.exe
c:\windows\wipxcdec.exe
c:\windows\isndctio.exe
c:\windows\nmhgtce.exe
c:\windows\swrrvhfr.exe
c:\program files\idnkw\cnups.dll
c:\windows\system32a2.sys
c:\docume~1\hp\locals~1\temp\tmpc6.tmp
c:\windows\system32\drivers\nicomsp2p32.sys
c:\windows\system32\drivers\msosmsfpfis64.sys
c:\docume~1\hp\locals~1\temp\tmpb6.tmp
c:\docume~1\hp\locals~1\temp\tmp88.tmp
c:\windows\system32\drivers\hdv32_c.sys
c:\docume~1\hp\locals~1\temp\tmpf6.tmp
c:\windows\system32\drivers\damaozm.sys
c:\windows\system32\drivers\bdguard.sys
c:\windows\system32\drivers\cnrndv.sys
2.删除重启后使用SREng修复下面各项： 启动项目 －－ 注册表之如下项删除：
[{242c168c-c3bd-4ad1-849f-e2179437a19a}]
[{A9895933-6636-4281-BC58-EE6DE2AF96E3}]
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]
[{c7c5224f-143b-4c7e-bc8a-a6b7e70f0f60}]
[{d592daa6-9b5e-416d-973a-d76c53183e7e}]
[{8AD0F1B1-990D-4F52-A33D-2837E43CEF58}]
[{8c3dd05d-a6a1-4cb5-a714-94be3c3b4cd0}]
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}]
[{18e64250-19a8-4d10-828f-30e101a22291}]
[{28766E1C-74B0-4417-8C75-F12AE309EF35}]
[{28EB3777-3E23-4E72-8449-A992D09D24C3}]
[{DC3D30AE-0380-4151-8934-EE98A34B0370}]
注意该项[AppInit_DLLs]修改：把<0,msosmnsf00.dll,aaaaaa.dll,pppppp.dll,ffffff.dll,dddddd.dll,yyyyyy.dll,uuuuuu.dll,wipxcdec.dll,iiiiii.dll,hhhhhh.dll,nnnnnn.dll,oooooo.dll,mmmmmm.dll,vvvvvv.dll,bbbbbb.dll,nicozctp00.dll,msosmhfp00.dll,msosdohs00.dll,zzzzzz.dll,xxxxxx.dll,ytewcxzsw.dll,llllll.dll,tttttt.dll,kkkkkk.dll,cccccc.dll,eeeeee.dll,wwwwww.dll,rrrrrr.dll,qqqqqq.dll,ssssss.dll,jjjjjj.dll,gggggg.dll,ieprot.dll,MMWLANGH1005.dll>修改为<>即清空
[yuiabct]
[fmbiost]
[bincdwsa]
[dionpis]
[anistio]
[rewkljlpw]
[hgeazpkc]
[fmcbbqi]
[juejwcx]
[msioSvr64]
[fmschif]
[ytewcxzsw]
[fewqickd]
[wipxcdec]
[isndctio]
[nmhgtce]
[uspwqrqr]
[Cnups]
[IFEO[360rpt.exe]]
[IFEO[360safe.exe]]
[IFEO[360safebox.exe]]
[IFEO[360tray.exe]]
[IFEO[CCenter.exe]]
[IFEO[KPPMain.exe]]
[IFEO[KWatch.exe]]
[IFEO[QQDoctor.exe]]
[IFEO[QQDoctorMain.exe]]
[IFEO[QQKav.exe]]
[IFEO[RavMon.exe]]
[IFEO[RavMonD.exe]]
[IFEO[safeboxTray.exe]]
[IFEO[SelfUpdate.exe]]
[IFEO[tqat.exe]]
启动项目 －－ 服务－－ 驱动程序之如下项删除：
[R2A / R2A]
[zctp / zctp]
[msp2p32 / msp2p32]
[msfpfis64 / msfpfis64]
[mnsf / mnsf]
[mhfp / mhfp]
[Hdv32 / Hdv32]
[dohs / dohs]
[damaozm / damaozm]
[BdGuard / BdGuard]
[CNRNDV / CNRNDV]
系统修复－－ 浏览器加载项之如下项删除：
[] <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>
[] <C:\PROGRA~1\CNRN\RNEvent.dll>
[CnBho Class] <C:\PROGRA~1\IdnKw\cnbho.dll>
[CnBho Class] <C:\PROGRA~1\IdnKw\cnbho.dll>
[百度工具栏] <C:\PROGRA~1\baidu\bar\baidubar.dll>
[] <C:\PROGRA~1\CNRN\RNEvent.dll>
[] <C:\PROGRA~1\CNRN\CNRN.dll>
[] <C:\WINDOWS\system32\SSup.dll>
[BandIE Class] <C:\PROGRA~1\baidu\bar\baidubar.dll>
[百度工具栏] <C:\PROGRA~1\baidu\bar\baidubar.dll>
做完下载以下软件清理一次并更新杀毒软件至最新进行全盘杀毒一次
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe 用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml 下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip做完请一定参考这里：
http://bbs.ikaka.com/showtopic-8508653.aspx将补丁打上
