1.建议使用XDelBox删除以下文件:(
XDelBox1.6下载)
使用说明:勾选抑制再生,删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\system32\nwapi32dj.dll
c:\windows\system32\imgutilhx2.dll
c:\windows\system32\xolehlpjh.dll
c:\windows\system32\certmgrkd.dll
c:\windows\system32\inetresdxc.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\apsggjba.dll
c:\windows\system32\pqfyznbt.dll
c:\windows\temp\pandrv.sys
c:\windows\system32\drivers\ulxkbch.sys
c:\windows\system32\drivers\msiffei.sys
c:\windows\windows.ext
c:\windows\system32\explore.exe
c:\windows\system32\hbmhly.exe
c:\windows\soundman.exe
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[nwapi32dj.dll] <C:\WINDOWS\system32\nwapi32dj.dll>
[imgutilhx2.dll] <C:\WINDOWS\system32\imgutilhx2.dll>
[xolehlpjh.dll] <C:\WINDOWS\system32\xolehlpjh.dll>
[certmgrkd.dll] <C:\WINDOWS\system32\certmgrkd.dll>
[inetresdxc.dll] <C:\WINDOWS\system32\inetresdxc.dll>
[{A2C3BA54-DF75-4881-8EB3-E54B26BBBBC9}] <C:\WINDOWS\system32\nwapi32dj.dll>
[{DA56B183-A731-402b-9235-2CB8803E212D}] <C:\WINDOWS\system32\imgutilhx2.dll>
[{F0930A2F-D971-4828-8209-B7DFD266ED44}] <C:\WINDOWS\system32\xolehlpjh.dll>
[{9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5}] <C:\WINDOWS\system32\certmgrkd.dll>
[{BB4E3499-0132-4d3f-849A-2BE1B26D84E1}] <C:\WINDOWS\system32\inetresdxc.dll>
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}] <C:\WINDOWS\system32\rfdswc.dll>
[{7FD45A54-9875-698F-E56E-65102358FDF7}] <C:\WINDOWS\system32\apsggjba.dll>
[vejyphqk.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[nslpdtls.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[fckghbnx.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[chuhjgec.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[waawjsnz.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[kzuhppru.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[rwgsgtxi.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[zrrmyfix.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[qjniqity.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[slocwwah.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[nufmibou.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[zowandtk.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[fbskyeef.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[fyduyfgs.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[pqfyznbt.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[rnxhankd.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[hxsphrzf.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[nvemkhcj.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
[nrbhhddh.dll] <C:\WINDOWS\system32\pqfyznbt.dll>
<AppInit_DLLs><aaa.dll,HBmhly.dll>此项修改成<AppInit_DLLs>< >,即清空
用附件工具清理映像劫持项
启动项目 -- 服务-- 驱动程序之如下项禁用:
[Pandrv / Pandrv] <\??\C:\WINDOWS\TEMP\Pandrv.sys>
[ulxkbch / ulxkbch] <\SystemRoot\system32\drivers\ulxkbch.sys>
[msiffei / msiffei] <System32\Drivers\msiffei.sys>
3.下载windows清理助手清理系统http://www.arswp.com/download/arswp/arswp2.rar