1建议使用XDelBox(下载地址：
http://bbs.ikaka.com/attachment.aspx?attachmentid=446806）
删除以下文件：（使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择剪贴板导入不检查路径，导入后记得勾选抑制其再生，在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储设备）
C:\WINDOWS\system32\ddchddag.dll
C:\WINDOWS\system32\leimdakk.dll
C:\WINDOWS\system32\oonkacce.dll
C:\WINDOWS\system32\jfjjkpop.dll
C:\WINDOWS\system32\mefdlpda.dll
C:\WINDOWS\system32\hoojiicp.dll
C:\WINDOWS\system32\kbajpdhb.dll
C:\WINDOWS\system32\akkpceph.dll
C:\WINDOWS\system32\jiakcgca.dll
C:\WINDOWS\system32\oibbpmen.dll
C:\WINDOWS\system32\peimhmie.dll
C:\WINDOWS\system32\linmfgga.dll
C:\WINDOWS\system32\jfijjnam.dll
C:\WINDOWS\system32\nhhpcmop.dll
C:\Program Files\Internet Explorer\PowerNt.Onz
C:\DOCUME~1\ADMINI~1.06B\LOCALS~1\Temp\WowInitcode.dat
C:\WINDOWS\system32\anymie360.exe
\??\C:\WINDOWS\system32\23F61EC7.dat
C:\WINDOWS\System32\Drivers\msiffei.sys
2 重启后用sreng删除下列注册表项
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{478932A2-862F-4A34-A264-54A6EB998FDE}><C:\Program Files\Internet Explorer\PowerNt.Onz> []
<{DDC1DDA0-C429-40BC-97E6-EBA161AB8B55}><C:\WINDOWS\system32\ddchddag.dll> []
<{5E26DA44-6A8D-427A-AD9E-2A469BD4B2D4}><C:\WINDOWS\system32\leimdakk.dll> []
<{8874ACCE-9CD3-44CD-A0BA-F67D816971D6}><C:\WINDOWS\system32\oonkacce.dll> []
<{3F334989-F8DF-475D-A0DD-D989B25B2EA1}><C:\WINDOWS\system32\jfjjkpop.dll> []
<{6EFD59DA-C66E-40BA-842A-12393C6F731C}><C:\WINDOWS\system32\mefdlpda.dll> []
<{188322C9-D741-4D71-B4FE-0C9255953AB2}><C:\WINDOWS\system32\hoojiicp.dll> []
<{4BA39D1B-E784-4E34-8ACC-39467EB50E00}><C:\WINDOWS\system32\kbajpdhb.dll> []
<{A449CE91-9C02-416F-B6BF-84407F8B6EC3}><C:\WINDOWS\system32\akkpceph.dll> []
<{32A4C0CA-2B3B-4AC6-AE3A-E0D6C69C1443}><C:\WINDOWS\system32\jiakcgca.dll> []
<{82BB96E7-B27D-4DDF-814A-0B90AA7CC8ED}><C:\WINDOWS\system32\oibbpmen.dll> []
<{9E26162E-9CB2-4E7F-B9B1-044F17F5B7FB}><C:\WINDOWS\system32\peimhmie.dll> []
<{5276F00A-C00A-48EF-93DA-95CAA5068264}><C:\WINDOWS\system32\linmfgga.dll> []
<{3F2337A6-A254-4DA9-8672-8E16C0F68F40}><C:\WINDOWS\system32\jfijjnam.dll> []
<{7119C689-6947-4E27-9BD4-7032DB642449}><C:\WINDOWS\system32\nhhpcmop.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<DDC1DDA0><C:\WINDOWS\system32\ddchddag.dll> []
<5E26DA44><C:\WINDOWS\system32\leimdakk.dll> []
<8874ACCE><C:\WINDOWS\system32\oonkacce.dll> []
<3F334989><C:\WINDOWS\system32\jfjjkpop.dll> []
<6EFD59DA><C:\WINDOWS\system32\mefdlpda.dll> []
<188322C9><C:\WINDOWS\system32\hoojiicp.dll> []
<4BA39D1B><C:\WINDOWS\system32\kbajpdhb.dll> []
<A449CE91><C:\WINDOWS\system32\akkpceph.dll> []
<32A4C0CA><C:\WINDOWS\system32\jiakcgca.dll> []
<82BB96E7><C:\WINDOWS\system32\oibbpmen.dll> []
<9E26162E><C:\WINDOWS\system32\peimhmie.dll> []
<5276F00A><C:\WINDOWS\system32\linmfgga.dll> []
<3F2337A6><C:\WINDOWS\system32\jfijjnam.dll> []
<7119C689><C:\WINDOWS\system32\nhhpcmop.dll> []
3用sreng将<AppInit_DLLs>的键值清空<>.
4用sreng删除浏览器加载项
[]
{478932A2-862F-4A34-A264-54A6EB998FDE} <C:\Program Files\Internet Explorer\PowerNt.Onz, N/A>
[]
{478932A2-862F-4A34-A264-54A6EB998FDE} <C:\Program Files\Internet Explorer\PowerNt.Onz, N/A>
5有劫持项，下载工具修复。
http://bbs.ikaka.com/attachment.aspx?attachmentid=435625下载镜像劫持修复工具
