用sreng
删除启动项目=>注册表
<MSDCG32 ><LYLeador.exe> [N/A]
<{AEB6717E-7E19-11d0-97EE-00C04FD91974}><winforms.dll> [N/A]
<{AEB6717E-7E19-11d0-97EE-00C04FD91975}><zinforms.dll> [N/A]
<{4E32FA58-3453-FA2D-BC49-F340348ACCE4}><C:\WINDOWS\system32\rsmydpm.dll> [N/A]
<{334345F1-DACF-3452-CB7D-4620F34A1533}><C:\WINDOWS\system32\rsztcpm.dll> []
<{28907901-1416-3389-9981-372178569982}><C:\WINDOWS\system32\kawdbzy.dll> [N/A]
<{2598FF45-DA60-F48A-BC43-10AC47853D52}><C:\WINDOWS\system32\rarjbpi.dll> []
<{4859245F-345D-BC13-AC4F-145D47DA34F4}><C:\WINDOWS\system32\avzxdmn.dll> [N/A]
<{24783410-4F90-34A0-7820-3230ACD05F42}><C:\WINDOWS\system32\raqjbpi.dll> []
<{3A1247C1-53DA-FF43-ABD3-345F323A48D3}><C:\WINDOWS\system32\avwgcmn.dll> [N/A]
<{18847374-8323-FADC-B443-4732ABCD3781}><C:\WINDOWS\system32\sidjazy.dll> [N/A]
<{2A321487-4977-D98A-C8D5-6488257545A2}><C:\WINDOWS\system32\kapjbzy.dll> [N/A]
<{57D81718-1314-5200-2597-587901018075}><C:\WINDOWS\system32\kaqhezy.dll> [N/A]
<{2960356A-458E-DE24-BD50-268F589A56A2}><C:\WINDOWS\system32\avwlbmn.dll> [N/A]
<{66650011-3344-6688-4899-345FABCD1566}><C:\WINDOWS\system32\ratbfpi.dll> [N/A]
<{3C87A354-ABC3-DEDE-FF33-3213FD7447C3}><C:\WINDOWS\system32\kvdxcma.dll> [N/A]
<{22FAACDE-34DA-CCD4-AB4D-DA34485A3422}><C:\WINDOWS\system32\rsjzbpm.dll> [N/A]
<{5B681598-AD5F-BC8C-77DC-748FAC8D3FB5}><C:\WINDOWS\system32\kafyezy.dll> []
<{2D561258-45F3-A451-F908-A258458226D2}><C:\WINDOWS\system32\kvdxsbma.dll> []
删除启动项目=>服务
[FB000E3A / FB000E3A][Stopped/Auto Start]
<C:\WINDOWS\system32\F77B20D5.EXE -k><N/A>
启动项目=>注册表
<AppInit_DLLs> 编辑成为 空值
重启,删除文件
C:\WINDOWS\system32\LYLeador.exe
C:\WINDOWS\system32\zinforms.dll
C:\WINDOWS\system32\winforms.dll
C:\WINDOWS\system32\rsmydpm.dll
C:\WINDOWS\system32\rsztcpm.dll
C:\WINDOWS\system32\kawdbzy.dll
C:\WINDOWS\system32\rarjbpi.dll
C:\WINDOWS\system32\avzxdmn.dll
C:\WINDOWS\system32\raqjbpi.dll
C:\WINDOWS\system32\avwgcmn.dll
C:\WINDOWS\system32\sidjazy.dll
C:\WINDOWS\system32\kapjbzy.dll
C:\WINDOWS\system32\kaqhezy.dll
C:\WINDOWS\system32\avwlbmn.dll
C:\WINDOWS\system32\ratbfpi.dll
C:\WINDOWS\system32\kvdxcma.dll
C:\WINDOWS\system32\rsjzbpm.dll
C:\WINDOWS\system32\kafyezy.dll
C:\WINDOWS\system32\kvdxsbma.dll
C:\WINDOWS\system32\F77B20D5.EXE