用xdelbox重启后删除
C:\WINDOWS\system32\Wintemp.dll
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\netscm.dll
c:\windows\System32\QCONSVC.EXE
c:\windows\System32\drivers\TDSMAPI.SYS
c:\windwos\System32\drivers\Tppwrif.sys
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\AIBMRUNL.dll
C:\WINDOWS\SYSTEM32\TPSHOCKS.EXE
C:\PROGRAM FILES\THINKPAD\PKGMGR\HOTKEY\TPHKMGR.EXE
C:\PROGRAM FILES\THINKPAD\UTILIT~1\EZEJMNAP.EXE
C:\PROGRAM FILES\THINKPAD\PKGMGR\HOTKEY\TPONSCR.EXE
C:\PROGRAM FILES\THINKPAD\PKGMGR\HOTKEY_1\TPSCREX.EXE
C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4PNP.EXE
C:\PROGRAM FILES\IBM\MESSAGES BY IBM\IBMMESSAGES.EXE
C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\QCTRAY.EXE
C:\PROGRAM FILES\DIGITAL LINE DETECT\DLG.EXE
用SReng删除服务
服务
[6to4 / 6to4][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Wintemp.dll><N/A>
[IBM PM Service / IBMPMSVC][Running/Auto Start]
<C:\WINDOWS\system32\ibmpmsvc.exe><N/A>
[Network Connection Manage Protocol / Nwsapagent][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\netscm.dll><N/A>
[QCONSVC / QCONSVC][Running/Auto Start]
<System32\QCONSVC.EXE><(File is missing)>
用Sreng删除服务-驱动
[TDSMAPI / TDSMAPI][Running/System Start]
<System32\drivers\TDSMAPI.SYS><N/A>
[TPPWRIF / TPPWRIF][Running/System Start]
<System32\drivers\Tppwrif.sys><N/A>
[TSMAPIP / TSMAPIP][Running/System Start]
<System32\drivers\TSMAPIP.SYS><N/A>