1.建议使用XDelBox删除以下文件:
c:\windows\system32\avpsrv.dll
c:\windows\system32\cmdbcs.dll
c:\windows\system32\dbghlp32.dll
c:\windows\system32\lotushlp.dll
c:\windows\system32\msimms32.dll
c:\windows\system32\msprint32d.dll
c:\windows\system32\nvdispdrv.dll
c:\windows\system32\shaproc.dll
c:\windows\system32\upxdnd.dll
c:\windows\system32\wsockdrv32.dll
c:\windows\system32\gjtmayc.dll
c:\windows\system32\jsqxayc.dll
c:\windows\system32\kvsc3.dll
c:\windows\system32\rarjepi.dll
c:\windows\system32\kawdizy.dll
c:\windows\system32\kvdxsmma.dll
c:\windows\system32\ratbspi.dll
c:\windows\system32\wsmsezx.dll
c:\windows\system32\rsmyjpm.dll
c:\windows\system32\okmhdzy.dll
c:\windows\system32\avwlimn.dll
c:\windows\system32\avzxmmn.dll
c:\windows\system32\gjfhayc.dll
c:\windows\system32\avwlhmn.dll
c:\windows\system32\kvdxlma.dll
c:\windows\system32\swrcfzc.dll
c:\program files\common files\microsoft shared\msinfo\system76.ins
c:\windows\system32\kaqhlzy.dll
c:\windows\system32\avwghmn.dll
c:\windows\system32\avzxlmn.dll
c:\windows\system32\kvdxkma.dll
c:\windows\system32\kvdxjma.dll
c:\windows\kvsc3.exe
c:\windows\shaproc.exe
c:\windows\msimms32.exe
c:\windows\nrguqr.exe
c:\windows\nvdispdrv.exe
c:\windows\338448l.exe
c:\windows\qchtwk.exe
c:\windows\338448m.exe
c:\windows\avpsrv.exe
c:\windows\lotushlp.exe
c:\windows\dbghlp32.exe
c:\windows\upxdnd.exe
c:\windows\cmdbcs.exe
c:\windows\ssldyn.exe
c:\docume~1\admini~1\locals~1\temp\tmp8a2e.tmp
c:\windows\system32\fat32.sys
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[{F859245F-345D-BC13-AC4F-145D47DA34FF}] <C:\WINDOWS\Fonts\avzxomn.dll>
[{992FADFA-BCDE-ACDF-CDEF-21054865CBA9}] <C:\WINDOWS\Fonts\wsmsgzx.dll>
[{6598FF45-DA60-F48A-BC43-10AC47853D56}] <C:\WINDOWS\Fonts\rarjfpi.dll>
[{A8907901-1416-3389-9981-37217856998A}] <C:\WINDOWS\Fonts\kawdjzy.dll>
[{B960356A-458E-DE24-BD50-268F589A56AB}] <C:\WINDOWS\Fonts\avwlkmn.dll>
[{DC87A354-ABC3-DEDE-FF33-3213FD7447CD}] <C:\WINDOWS\Fonts\kvdxmma.dll>
[{D7D81718-1314-5200-2597-58790101807D}] <C:\WINDOWS\Fonts\kaqhmzy.dll>
[{5598FF45-DA60-F48A-BC43-10AC47853D55}] <C:\WINDOWS\system32\rarjepi.dll>
[{98907901-1416-3389-9981-372178569989}] <C:\WINDOWS\system32\kawdizy.dll>
[{DD561258-45F3-A451-F908-A258458226DD}] <C:\WINDOWS\system32\kvdxsmma.dll>
[{47650011-3344-6688-4899-345FABCD1574}] <C:\WINDOWS\system32\ratbspi.dll>
[{792FADFA-BCDE-ACDF-CDEF-21054865CBA7}] <C:\WINDOWS\system32\wsmsezx.dll>
[{AE32FA58-3453-FA2D-BC49-F340348ACCEA}] <C:\WINDOWS\system32\rsmyjpm.dll>
[{4A57CAD1-412F-9547-713F-9641FA3FC7A4}] <C:\WINDOWS\system32\okmhdzy.dll>
[{9960356A-458E-DE24-BD50-268F589A56A9}] <C:\WINDOWS\system32\avwlimn.dll>
[{D859245F-345D-BC13-AC4F-145D47DA34FD}] <C:\WINDOWS\system32\avzxmmn.dll>
[{1C098A56-F90F-A789-901F-8906546720C1}] <C:\WINDOWS\system32\gjtmayc.dll>
[{1D908534-AD45-920F-AC89-4024FA9D26D1}] <C:\WINDOWS\system32\gjfhayc.dll>
[{1C098A56-F90F-A789-901F-8906546720C1}] <C:\WINDOWS\system32\gjtmayc.dll>
[{8960356A-458E-DE24-BD50-268F589A56A8}] <C:\WINDOWS\system32\avwlhmn.dll>
[{1D098345-9012-8750-8910-9128098134D1}] <C:\WINDOWS\system32\jsqxayc.dll>
[{0096957E-9758-4887-9755-C8761F5FDE61}] <>
[{CC87A354-ABC3-DEDE-FF33-3213FD7447CC}] <C:\WINDOWS\system32\kvdxlma.dll>
[{778A7521-FA87-34AB-34C2-4893F3AD34C7}] <C:\WINDOWS\system32\swrcfzc.dll>
[{A693A5AB-BDBA-4AE7-A1C8-E41FEE1C020B}] <C:\Program Files\Common Files\Microsoft Shared\MSINFO\System76.Ins>
[{C7D81718-1314-5200-2597-58790101807C}] <C:\WINDOWS\system32\kaqhlzy.dll>
[{8A1247C1-53DA-FF43-ABD3-345F323A48D8}] <C:\WINDOWS\system32\avwghmn.dll>
[{C859245F-345D-BC13-AC4F-145D47DA34FC}] <C:\WINDOWS\system32\avzxlmn.dll>
[{BC87A354-ABC3-DEDE-FF33-3213FD7447CB}] <C:\WINDOWS\system32\kvdxkma.dll>
[{AC87A354-ABC3-DEDE-FF33-3213FD7447CA}] <C:\WINDOWS\system32\kvdxjma.dll>
[Kvsc3] <C:\WINDOWS\Kvsc3.exE>
[SHAProc] <C:\WINDOWS\SHAProc.exe>
[MsIMMs32] <C:\WINDOWS\MsIMMs32.exE>
[WSockDrv32] <C:\WINDOWS\nrguqr.exe>
[NVDispDrv] <C:\WINDOWS\NVDispDRV.EXE>
[WinSysW] <C:\WINDOWS\338448L.exe>
[MsPrint32D] <C:\WINDOWS\qchtwk.exe>
[WinSysM] <C:\WINDOWS\338448M.exe>
[AVPSrv] <C:\WINDOWS\AVPSrv.exE>
[LotusHlp] <C:\WINDOWS\LotusHlp.exe>
[DbgHlp32] <C:\WINDOWS\DbgHlp32.exe>
[upxdnd] <C:\WINDOWS\upxdnd.exe>
[cmdbcs] <C:\WINDOWS\cmdbcs.exe>
[SSLDyn] <C:\WINDOWS\SSLDyn.exE>
启动项目 -- 服务-- 驱动程序之如下项删除:
[ZX / ZX] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp8A2E.tmp>
[PciHardDisk / PciHardDisk] <\??\C:\WINDOWS\system32\fat32.sys>
系统修复-- HOSTS文件--重置