中毒了，arp防火墙一直提示对外攻击

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

中的比较彻底~~~....


用附件的XDELBOX删除文件
C:\WINDOWS\system32\arjrhler.dll
C:\WINDOWS\system32\skqnebib.dll
C:\WINDOWS\system32\yzztlmsn.dll
C:\WINDOWS\AppPatch\AcPlugin.dll
C:\WINDOWS\AppPatch\AcSpecf.dll
C:\WINDOWS\system32\oohxebyt.dll
C:\WINDOWS\system32\apsggjba.dll
C:\WINDOWS\system32\mnmhgsrv.dll
C:\WINDOWS\system32\yxcschlp.dll
C:\WINDOWS\system32\ypcqghlp.dll
C:\WINDOWS\system32\mpwdeapi.dll
C:\WINDOWS\system32\hdf453d.dll
C:\WINDOWS\system32\zptlcsys.dll
C:\WINDOWS\system32\zyzxjime.dll
C:\WINDOWS\system32\ijdybpaw.dll
C:\WINDOWS\system32\mndhfdwd.dll
C:\WINDOWS\system32\ptjhehlp.dll
C:\WINDOWS\system32\zywlcime.dll
C:\WINDOWS\system32\zycbdime.dll
C:\WINDOWS\system32\zywmgime.dll
C:\WINDOWS\system32\mndshsrv.dll
C:\WINDOWS\system32\zxmsewin.dll
C:\WINDOWS\system32\detxbiua.dll
C:\WINDOWS\system32\akjsfkaq.dll
C:\WINDOWS\system32\apzhctde.dll
C:\WINDOWS\system32\pqzfajke.dll
C:\WINDOWS\system32\ozfyebyt.dll
C:\WINDOWS\system32\fd233ds4f3.dll
C:\WINDOWS\system32\jkhxaklo.dll
C:\WINDOWS\AppPatch\AclLayer.dll
C:\WINDOWS\AppPatch\AcXtrnel.bpl
C:\WINDOWS\system32\lofsdjbo.dll
C:\WINDOWS\system32\yxcsdhlp.dll
C:\WINDOWS\system32\detxciua.dll
C:\WINDOWS\system32\nhmxejkl.dll
C:\WINDOWS\system32\ietzcpaq.dll
C:\WINDOWS\system32\tisqctyu.dll
C:\WINDOWS\system32\apzhdtde.dll
C:\WINDOWS\system32\rijxbkin.dll
C:\WINDOWS\system32\ypdjgbmp.dll

复制他们，从剪贴板导入，点上抑制再生，右键点击要删除的文件列表，选择立即重起删除(如果说找不到文件,不用管,继续操作)

重起以后进入XDELBOX工具，执行删除~

删除过后，打开SRENG

注册表中删除

<{6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6}><C:\WINDOWS\system32\oohxebyt.dll>  []
    <{7FD45A54-9875-698F-E56E-65102358FDF7}><C:\WINDOWS\system32\apsggjba.dll>  []
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll>  []
    <{7A041F13-A111-12A3-B0CF-F99818AA68A7}><C:\WINDOWS\system32\zxmsdwin.dll>  [File is missing]
    <{35671234-7890-ABCD-CDEF-567801237653}><C:\WINDOWS\system32\yxcschlp.dll>  []
    <{1A698452-C5D8-C584-C256-C264C987C5A1}><C:\WINDOWS\system32\ijdyapaw.dll>  [File is missing]
    <{80AF1289-F140-A140-D012-C1458759FC08}><C:\WINDOWS\system32\ypcqghlp.dll>  []
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  []
    <{B629FF4F-ACDB-5C90-A098-FACB3456A26B}><C:\WINDOWS\system32\hdf453d.dll>  []
    <{50940F85-F015-14F1-A05F-F69858AC6D05}><C:\WINDOWS\system32\zptlcsys.dll>  []
    <{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll>  []
    <{2A698452-C5D8-C584-C256-C264C987C5A2}><C:\WINDOWS\system32\ijdybpaw.dll>  []
    <{6C648541-1025-9650-9057-6541258720C6}><C:\WINDOWS\system32\mndhfdwd.dll>  []
    <{AC69034A-F45F-D34D-A33A-C33C4D324FCA}><C:\WINDOWS\system32\arjrhler.dll>  []
    <{528DF602-9541-A985-210A-984A698C6F25}><C:\WINDOWS\system32\ptjhehlp.dll>  []
    <{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}><C:\WINDOWS\system32\zywlcime.dll>  []
    <{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll>  []
    <{52023698-6984-8541-9654-698745012525}><C:\WINDOWS\system32\skqnebib.dll>  []
    <{10618412-C528-C784-C056-C164D1F7C501}><C:\WINDOWS\system32\detxaiua.dll>  [File is missing]
    <{7319A1F1-9410-9654-3201-345FFA349137}><C:\WINDOWS\system32\zywmgime.dll>  []
    <{C490415F-65F8-B5C5-D8BA-9405FB12054C}><C:\WINDOWS\system32\yzztlmsn.dll>  []
    <{B490415F-65F8-B5C5-D8BA-9405FB12054B}><C:\WINDOWS\system32\yzztlmsn.dll>  []
    <{87FD640A-158F-48AC-FD14-1597F14A9778}><C:\WINDOWS\system32\mndshsrv.dll>  []
    <{8A041F13-A111-12A3-B0CF-F99818AA68A8}><C:\WINDOWS\system32\zxmsewin.dll>  []
    <{20618412-C528-C784-C056-C164D1F7C502}><C:\WINDOWS\system32\detxbiua.dll>  []
    <{6A908760-8000-4000-A000-9000322145A6}><C:\WINDOWS\system32\akjsfkaq.dll>  []
    <{3D698451-2015-6358-9871-2015987452D3}><C:\WINDOWS\system32\apzhctde.dll>  []
    <{60A345CD-ABCD-EFAB-CDEF-ABCD01020306}><C:\WINDOWS\system32\pqzfajke.dll>  []
    <{5A069845-2036-6084-9054-6087502480A5}><C:\WINDOWS\system32\ozfyebyt.dll>  []
    <{7C954872-1230-6541-9548-6541025884C7}><C:\WINDOWS\system32\fd233ds4f3.dll>  []
    <{14698742-2059-3025-9058-954023874141}><C:\WINDOWS\system32\jkhxaklo.dll>  []
    <{470165F1-9F65-569F-F895-F14F58F41074}><C:\WINDOWS\system32\lofsdjbo.dll>  []
    <{45671234-7890-ABCD-CDEF-567801237654}><C:\WINDOWS\system32\yxcsdhlp.dll>  []
    <{30618412-C528-C784-C056-C164D1F7C503}><C:\WINDOWS\system32\detxciua.dll>  []
    <{57AC9076-C898-B098-D098-A18319080975}><C:\WINDOWS\system32\nhmxejkl.dll>  []
    <{39109876-7619-9101-7012-901938475193}><C:\WINDOWS\system32\ietzcpaq.dll>  []
    <{38093456-9012-4568-9076-908765467183}><C:\WINDOWS\system32\tisqctyu.dll>  []
    <{4D698451-2015-6358-9871-2015987452D4}><C:\WINDOWS\system32\apzhdtde.dll>  []
    <{25FD6584-698F-BCD2-602C-698745210352}><C:\WINDOWS\system32\rijxbkin.dll>  []
    <{91954FAC-1023-154F-895A-1458258AD819}><C:\WINDOWS\system32\ypdjgbmp.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <DesktopWin><C:\WINDOWS\AppPatch\DesktopWin.dll>  []
编辑    <AppInit_DLLs><arjrhler.dll,skqnebib.dll,yzztlmsn.dll,nhmxejkl.dll,tisqctyu.dll>  []为    <AppInit_DLLs><>  []


删除浏览器加载项
[]
  {10618412-C528-C784-C056-C164D1F7C501} <C:\WINDOWS\system32\detxaiua.dll, N/A>
[]
  {1A698452-C5D8-C584-C256-C264C987C5A1} <C:\WINDOWS\system32\ijdyapaw.dll, N/A>
[]
  {20618412-C528-C784-C056-C164D1F7C502} <C:\WINDOWS\system32\detxbiua.dll, N/A>
[]
  {2A698452-C5D8-C584-C256-C264C987C5A2} <C:\WINDOWS\system32\ijdybpaw.dll, N/A>
[]
  {35671234-7890-ABCD-CDEF-567801237653} <C:\WINDOWS\system32\yxcschlp.dll, N/A>
[]
  {37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73} <C:\WINDOWS\system32\zywlcime.dll, N/A>
[]
  {38093456-9012-4568-9076-908765467183} <C:\WINDOWS\system32\tisqctyu.dll, N/A>
[]
  {3D698451-2015-6358-9871-2015987452D3} <C:\WINDOWS\system32\apzhctde.dll, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {50940F85-F015-14F1-A05F-F69858AC6D05} <C:\WINDOWS\system32\zptlcsys.dll, N/A>
[]
  {52023698-6984-8541-9654-698745012525} <C:\WINDOWS\system32\skqnebib.dll, N/A>
[]
  {528DF602-9541-A985-210A-984A698C6F25} <C:\WINDOWS\system32\ptjhehlp.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {60A345CD-ABCD-EFAB-CDEF-ABCD01020306} <C:\WINDOWS\system32\pqzfajke.dll, N/A>
[]
  {6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6} <C:\WINDOWS\system32\oohxebyt.dll, N/A>
[]
  {6C648541-1025-9650-9057-6541258720C6} <C:\WINDOWS\system32\mndhfdwd.dll, N/A>
[]
  {7319A1F1-9410-9654-3201-345FFA349137} <C:\WINDOWS\system32\zywmgime.dll, N/A>
[]
  {7A041F13-A111-12A3-B0CF-F99818AA68A7} <C:\WINDOWS\system32\zxmsdwin.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {7FD45A54-9875-698F-E56E-65102358FDF7} <C:\WINDOWS\system32\apsggjba.dll, N/A>
[]
  {80AF1289-F140-A140-D012-C1458759FC08} <C:\WINDOWS\system32\ypcqghlp.dll, N/A>



清理临时文件夹:
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空下列临时文件夹中所有内容：
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
C:\WINDOWS\TEMP

全盘杀毒