HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{1AB09B3F-A6D0-4B55-B87D-264934EBEAED}
[AM] 39. c:\program files\internet explorer\plugins\winsys84.sys
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{A393C2CF-1C26-4309-9765-13B7FDC0F200}
[AM] 40. c:\windows\system32\mypern1.dll
.text,sdata,.reloc,
{2598FF45-DA60-F48A-BC43-10AC47853D52}
[AM] 41. c:\windows\system32\rarjbpi.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{2960356A-458E-DE24-BD50-268F589A56A2}
[AM] 42. c:\windows\system32\avwlbmn.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{334345F1-DACF-3452-CB7D-4620F34A1533}
[AM] 43. c:\windows\system32\rsztcpm.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{57D81718-1314-5200-2597-587901018075}
[AM] 44. c:\windows\system32\kaqhezy.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{3C87A354-ABC3-DEDE-FF33-3213FD7447C3}
[AM] 45. c:\windows\system32\kvdxcma.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{66650011-3344-6688-4899-345FABCD1566}
[AM] 46. c:\windows\system32\ratbfpi.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{4859245F-345D-BC13-AC4F-145D47DA34F4}
[AM] 47. c:\windows\system32\avzxdmn.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{18847374-8323-FADC-B443-4732ABCD3781}
[AM] 48. c:\windows\system32\sidjazy.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{28907901-1416-3389-9981-372178569982}
[AM] 49. c:\windows\system32\kawdbzy.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{2D561258-45F3-A451-F908-A258458226D2}
[AM] 50. c:\windows\system32\kvdxsbma.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{0F7A277A-4B2A-4673-8CC0-957C72ECFC6E}
[AM] 51. c:\program files\internet explorer\info_ms.sys
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{2A321487-4977-D98A-C8D5-6488257545A2}
[AM] 52. c:\windows\system32\kapjbzy.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
{5B681598-AD5F-BC8C-77DC-748FAC8D3FB5}
[AM] 53. c:\windows\system32\kafyezy.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
病毒中得够完整的。
参考
http://forum.ikaka.com/topic.asp?board=28&artid=8376930解决。
