瑞星监控关闭 瑞星不能运行 主页被改 安全模式下也不行：日志在附件内

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

小狮子的解决方案，给你转过来了～

删除启动项
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
下注册表项目及对应dll文件
    <{00150015-0015-0015-0015-00150015BB15}><C:\WINDOWS\system32\glhcncon.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
下注册表项目及对应文件
    <cliconfgzx.dll><C:\WINDOWS\system32\cliconfgzx.dll>  [File is missing]
    <tuhyqpcz.dll><C:\WINDOWS\system32\glhcncon.dll>  []
    <kbdswjr.dll><C:\WINDOWS\system32\kbdswjr.dll>  [File is missing]
    <dispexcb.dll><C:\WINDOWS\system32\dispexcb.dll>  [File is missing]
    <bootvidgj.dll><C:\WINDOWS\system32\bootvidgj.dll>  [File is missing]
    <adsntzt.dll><C:\WINDOWS\system32\adsntzt.dll>  [File is missing]
    <imgutilhx2.dll><C:\WINDOWS\system32\imgutilhx2.dll>  [File is missing]
    <slbiopfs2.dll><C:\WINDOWS\system32\slbiopfs2.dll>  [File is missing]
    <wikszzal.dll><C:\WINDOWS\system32\glhcncon.dll>  []
    <glhcncon.dll><C:\WINDOWS\system32\glhcncon.dll>  []
删除驱动及驱动对应文件
HiddFldy / HiddFldy][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\d32dx9.sys><N/A>
IIS Manager  / IIS Manager ][Stopped/Manual Start]
  <\??\C:\DOCUME~1\STEED-~1\LOCALS~1\Temp\1.tmp><N/A>
自己测下以下文件http://www.virscan.org/

NTACCESS / NTACCESS][Stopped/Disabled]
  <\??\G:\NTACCESS.sys><N/A>
G:\NTGLM7X.sys><N/A>