重起删除以后，用SRENG删除
注册表中
<lvefangm><C:\WINDOWS\vfnmynyc.exe> []
<anistio><C:\WINDOWS\anistio.exE> []
<cinfonmc><C:\WINDOWS\cinfonmc.exe> []
<bincdwsa><C:\WINDOWS\bincdwsa.exe> []
<fmsjhif><C:\WINDOWS\fmsjhif.exe> []
<fmsbbqi><C:\WINDOWS\fmsbbqi.exe> []
<dbhlp32><C:\WINDOWS\dbhlp32.exe> []
<hefxxxy><C:\WINDOWS\hefxxxy.exe> []
<ticisms><C:\WINDOWS\ticisms.exe> []
<ptshell><C:\WINDOWS\ptshell.exe> []
<huifitc><C:\WINDOWS\huifitc.exe> []
<fmbiost><C:\WINDOWS\fmbiost.exe> []
<dndsioc><C:\WINDOWS\dndsioc.exe> []
<mfchlp64><C:\WINDOWS\mfchlp64.exe> []
<yuiabct><C:\WINDOWS\yuiabct.exe> []
<{4502C140-808F-40B6-8522-4BC4230CAEF2}><C:\WINDOWS\system32\mpdcty.dll> []
<{C0595A7E-2E2F-4B34-A83A-019270A0A464}><C:\WINDOWS\system32\tdffdl.dll> []
<{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}><C:\WINDOWS\system32\zgxfdx.dll> []
<{7FA4A83B-F99A-4bfc-A8E2-6A62B05D2C82}><C:\WINDOWS\TEMP\datB.tmp> []
<{633BA449-FE3D-4F3D-B8B8-BD8E0C2FBAE6}><C:\WINDOWS\system32\ffxams.dll> []
<{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}><C:\WINDOWS\system32\wyrsdj.dll> []
<{F3A687FE-AFEB-4418-B82C-753093D3A5AD}><C:\WINDOWS\system32\phnrqt.dll> []
<{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}><C:\WINDOWS\system32\jhrcar.dll> []
把[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><SysDaJHv.dll,msosmhfp00.dll,nicozftp00.dll,msosdohs01.dll,msosmnsf00.dll,msosping00.dll,msosfmsq00.dll>
编辑为[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>
删除服务、
[AE8D24EF / AE8D24EF][Stopped/Auto Start]
<C:\WINDOWS\system32\4937133E.EXE -d><>
[ilab / ilab][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Silab.dll><i-lab.cn>
删除驱动
[dohs / dohs][Stopped/Auto Start]
<\??\C:\WINDOWS\TEMP\tmp12.tmp><N/A>
[fmsq / fmsq][Stopped/Auto Start]
<\??\C:\WINDOWS\TEMP\tmp3F.tmp><N/A>
[mhfp / mhfp][Stopped/Auto Start]
<\??\C:\WINDOWS\TEMP\tmp5.tmp><N/A>
[mnsf / mnsf][Stopped/Auto Start]
<\??\C:\WINDOWS\TEMP\tmp3B.tmp><N/A>
[ping / ping][Stopped/Auto Start]
<\??\C:\WINDOWS\TEMP\tmp3D.tmp><N/A>
[msp2p32 / msp2p32][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\nicomsp2p32.sys><N/A>
然后重起
下载arswp(Windows清理助手)清理下..
http://www.arswp.com/download/arswp/arswp.rar清理临时文件夹:
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空下列临时文件夹中所有内容：
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
C:\WINDOWS\TEMP
