流氓软件比较多，建议还是使用windows清理助手比较多
PS：不知道怎么回事，LZ的日志，呵呵，分析助手无法分析
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll> []
<{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}><C:\WINDOWS\system32\oohxdbyt.dll> []
<{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll> []
<{9490415F-65F8-B5C5-D8BA-9405FB120549}><C:\WINDOWS\system32\yzztimsn.dll> []
<{4C648541-1025-9650-9057-6541258720C4}><C:\WINDOWS\system32\mndhddwd.dll> [N/A]
<{4629FF4F-ACDB-5C90-A098-FACB3456A264}><C:\WINDOWS\system32\mpmydapi.dll> [N/A]
<{81954FAC-1023-154F-895A-1458258AD818}><C:\WINDOWS\system32\ypdjfbmp.dll> [N/A]
<{67FD640A-158F-48AC-FD14-1597F14A9776}><C:\WINDOWS\system32\mndsfsrv.dll> [N/A]
<{528DF602-9541-A985-210A-984A698C6F25}><C:\WINDOWS\system32\ptjhehlp.dll> []
<{22596546-2036-9451-6058-658402589722}><C:\WINDOWS\system32\opshbbty.dll> []
<{2D698451-2015-6358-9871-2015987452D2}><C:\WINDOWS\system32\apzhbtde.dll> []
<{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll> []
<{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll> []
<{50940F85-F015-14F1-A05F-F69858AC6D05}><C:\WINDOWS\system32\zptlcsys.dll> []
<{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}><C:\WINDOWS\system32\yxfhcjpg.dll> [N/A]
<{470165F1-9F65-569F-F895-F14F58F41074}><C:\WINDOWS\system32\lofsdjbo.dll> []
<{37AC9076-C898-B098-D098-A18319080973}><C:\WINDOWS\system32\nhmxcjkl.dll> []
<{35671234-7890-ABCD-CDEF-567801237653}><C:\WINDOWS\system32\yxcschlp.dll> []
<{6319A1F1-9410-9654-3201-345FFA349136}><C:\WINDOWS\system32\zywmfime.dll> [N/A]
<{91698482-6555-3666-1222-954784129019}><C:\WINDOWS\system32\zxptejpg.dll> []
<{70AF1289-F140-A140-D012-C1458759FC07}><C:\WINDOWS\system32\ypcqfhlp.dll> []
<{32023698-6984-8541-9654-698745012523}><C:\WINDOWS\system32\skqncbib.dll> []
<{14698742-2059-3025-9058-954023874141}><C:\WINDOWS\system32\jkhxaklo.dll> []
<{29109876-7619-9101-7012-901938475192}><C:\WINDOWS\system32\ietzbpaq.dll> []
<{2A095412-A568-B258-C587-D148E148F0A2}><C:\WINDOWS\system32\cdwsbkop.dll> []
<{5A069845-2036-6084-9054-6087502480A5}><C:\WINDOWS\system32\ozfyebyt.dll> []
<{18093456-9012-4568-9076-908765467181}><C:\WINDOWS\system32\tisqatyu.dll> []
<{5FD45A54-9875-698F-E56E-65102358FDF5}><C:\WINDOWS\system32\apsgejba.dll> []
<{77FD640A-158F-48AC-FD14-1597F14A9777}><C:\WINDOWS\system32\mndsgsrv.dll> []
<{DC3D30AE-0380-4151-8934-EE98A34B0370}><C:\WINDOWS\system32\mfdesy.dll> [N/A]
<{C0595A7E-2E2F-4B34-A83A-019270A0A464}><C:\WINDOWS\system32\tdffdl.dll> [N/A]
<{28EB3777-3E23-4E72-8449-A992D09D24C3}><C:\WINDOWS\system32\zefdst.dll> [N/A]
<{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}><C:\WINDOWS\system32\hhrdxd.dll> [N/A]
<{84143967-B645-4BFF-B873-DA1DC886E9A7}><C:\WINDOWS\system32\cedafb.dll> [N/A]
<{841529CB-7F77-4B99-A895-B5441E0D302F}><C:\WINDOWS\system32\jfrwdh.dll> [N/A]
<{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}><C:\WINDOWS\system32\wyrsdj.dll> [N/A]
<{F99DEFDD-200B-4410-B572-E90883D527D2}><C:\WINDOWS\system32\wrqszl.dll> [N/A]
<{4F4F0064-71E0-4f0d-0003-708476C7815F}><C:\WINDOWS\system32\midimapgj.dll> [N/A]
<{5C648541-1025-9650-9057-6541258720C5}><C:\WINDOWS\system32\mndhedwd.dll> [N/A]
<{7319A1F1-9410-9654-3201-345FFA349137}><C:\WINDOWS\system32\zywmgime.dll> []
<{4C69034A-F45F-D34D-A33A-C33C4D324FC4}><C:\WINDOWS\system32\arjrbler.dll> []
<{5629FF4F-ACDB-5C90-A098-FACB3456A265}><C:\WINDOWS\system32\mpmyeapi.dll> [N/A]
<{91954FAC-1023-154F-895A-1458258AD819}><C:\WINDOWS\system32\ypdjgbmp.dll> []
<{3C954872-1230-6541-9548-6541025884C3}><C:\WINDOWS\system32\lijzclit.dll> [N/A]
<{6C648541-1025-9650-9057-6541258720C6}><C:\WINDOWS\system32\mndhfdwd.dll> []
<{6629FF4F-ACDB-5C90-A098-FACB3456A266}><C:\WINDOWS\system32\mpmyfapi.dll> []
<{4C954872-1230-6541-9548-6541025884C4}><C:\WINDOWS\system32\lijzdlit.dll> []
<{6A041F13-A111-12A3-B0CF-F99818AA68A6}><C:\WINDOWS\system32\zxmscwin.dll> []
驱动程序
[abwqk / abwqk][Stopped/Manual Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_temp.dat><N/A>
[ADProt / ADProt][Stopped/System Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp43.tmp><N/A>
[EagleNT / EagleNT][Stopped/Manual Start]
以上为可疑项
