使用
smtrpl
http://bbs.ikaka.com/attachment.aspx?attachmentid=460942替换本机的
C:\WINDOWS\userinit.EXE
正常的userinit.EXE见
http://bbs.ikaka.com/showtopic-8417665.aspx3楼附件
1.建议使用XDelBox删除以下文件:(
XDelBox1.8下载)
使用说明:(先勾选抑制再生)删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,(在待删除文件列表里点击右键选择从剪贴板导入不检查路径,)选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\docume~1\lenovo\locals~1\temp\65200
c:\docume~1\lenovo\locals~1\temp\66245
c:\docume~1\lenovo\locals~1\temp\65948
c:\windows\system32\cjoklpcb.dll
c:\windows\system32\gnhfknkm.dll
c:\docume~1\lenovo\locals~1\temp\msdll.dat
c:\docume~1\lenovo\locals~1\temp\zxdll.dat
c:\program files\internet explorer\powerjz.zsk
c:\windows\fonts\3efeaf36.fon
c:\windows\fonts\cespvp8fqd.fon
c:\windows\fonts\crrp2mdp.fon
c:\windows\fonts\dpgu7zke.fon
c:\windows\fonts\dpmkwru3m.fon
c:\windows\fonts\ntkrm2essn.fon
c:\windows\system32\695c5a80.dll
c:\windows\system32\aajmidol.dll
c:\windows\system32\76b9ba7a.dll
c:\windows\system32\fnoieafe.dll
c:\windows\system32\hzrecog.dll
c:\windows\system32\iialcgap.dll
c:\windows\system32\ijffhcbm.dll
c:\windows\system32\ilflgomi.dll
c:\windows\system32\jaebhjpg.dll
c:\windows\system32\jeeiiomh.dll
c:\windows\system32\jpbdimaj.dll
c:\windows\system32\skj9prhxkpy.dll
c:\windows\system32\splitchar.dll
c:\windows\system32\ufofly32.dll
c:\windows\system32\kgngt4xa.dll
c:\windows\system32\ufofly32.exe
c:\windows\system32\rbwn2dra.dll
c:\windows\system32\cc80f0b4.dll
c:\windows\system32\704c3595.dll
c:\windows\system32\e4814792.dll
c:\windows\system32\1957817a.dll
c:\windows\fonts\d7019b3b.fon
c:\windows\system32\pdgjeofa.dll
c:\windows\system32\lmmdcogk.dll
c:\windows\system32\maghcblc.dll
c:\windows\system32\jfchaehe.dll
c:\windows\system32\npaoeadd.dll
c:\windows\system32\lhjafojf.dll
c:\windows\system32\diafgihc.dll
c:\windows\system32\jdlmojjh.dll
c:\docume~1\lenovo\locals~1\temp\~f7b23e.tmp
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[nwiz] <ufoFly32.exe>
[{3E52FA6E-D83E-4811-8FB5-1D54C0687227}] <C:\WINDOWS\fonts\dPmKwRu3m.fon>
[{47018D3A-8682-4D30-AC5E-F74B84189AB3}] <C:\WINDOWS\fonts\crrp2mDP.fon>
[{695C5A80-18A5-4CD2-A911-4DBEBE92F18D}] <C:\WINDOWS\system32\695C5A80.dll>
[{071F4746-8AED-490A-98F6-6D7B3D526FFA}] <C:\WINDOWS\system32\gnhfknkm.dll>
[{DDFDCED2-075A-4910-986E-B2BDA2B0E916}] <C:\WINDOWS\system32\rBWN2dra.dll>
[{FC8F4603-4AB2-4A0D-B17F-886CC8AAAFD2}] <C:\WINDOWS\fonts\CESPVP8FQd.fon>
[{3EFEAF36-B081-4454-9DE0-9023F21B2263}] <C:\WINDOWS\fonts\3EFEAF36.fon>
[{CC80F0B4-04D7-44D0-8DB9-9109B5B72141}] <C:\WINDOWS\system32\CC80F0B4.dll>
[{AE8813B0-61B3-4F6D-8F9A-7AF223E2C46E}] <C:\WINDOWS\system32\SKj9pRhxKPy.dll>
[{FC8F4603-4AB2-4A0D-B17F-886CC8AAAFD2}] <C:\WINDOWS\fonts\CESPVP8FQd.fon>
[{DDFDCED2-075A-4910-986E-B2BDA2B0E916}] <C:\WINDOWS\system32\rBWN2dra.dll>
[{3EFEAF36-B081-4454-9DE0-9023F21B2263}] <C:\WINDOWS\fonts\3EFEAF36.fon>
[{CC80F0B4-04D7-44D0-8DB9-9109B5B72141}] <C:\WINDOWS\system32\CC80F0B4.dll>
[{AE8813B0-61B3-4F6D-8F9A-7AF223E2C46E}] <C:\WINDOWS\system32\SKj9pRhxKPy.dll>
[{76B9BA7A-81D0-4979-8598-8471F2AB5186}] <C:\WINDOWS\system32\76B9BA7A.dll>
[{704C3595-DB85-40F6-A601-8D6F346907BD}] <C:\WINDOWS\system32\704C3595.dll>
[{E4814792-EFA3-4C20-93D0-8B130A59F9A8}] <C:\WINDOWS\system32\E4814792.dll>
[{304B9531-94D9-4F69-81A3-99B7B172220F}] <C:\WINDOWS\system32\kGngT4xA.dll>
[{1957817A-94B2-4CAC-B113-A331809B5730}] <C:\WINDOWS\system32\1957817A.dll>
[{3E090A14-E55E-4BA3-97C2-505907EAC7A7}] <C:\WINDOWS\fonts\Dpgu7ZKe.fon>
[{D7019B3B-ABF8-4D55-AB50-95A110373D54}] <C:\WINDOWS\Fonts\D7019B3B.fon>
[{1E322963-355E-422F-BE2E-8C4667E31D10}] <C:\WINDOWS\fonts\NtkRM2essN.fon>
[{BC8975EB-DD3E-406A-8DF9-218848C3B594}] <C:\Program Files\Internet Explorer\PowerJz.zsk>
[{23FF1CB6-0F73-49A3-979B-7D4ED36D19FA}] <C:\WINDOWS\system32\ijffhcbm.dll>
[{3AEB1390-3446-420F-80FF-C3BB84BE15AD}] <C:\WINDOWS\system32\jaebhjpg.dll>
[{22A5C0A9-E5FE-46BF-A652-9066F04492E7}] <C:\WINDOWS\system32\iialcgap.dll>
[{3EE22861-0769-4EFB-8C9A-9B8F90C3AC36}] <C:\WINDOWS\system32\jeeiiomh.dll>
[{25F50862-EE7E-42C0-BC75-623A545A1067}] <C:\WINDOWS\system32\ilflgomi.dll>
[{AA362D85-E20E-48B6-8F84-6448F5DB050C}] <C:\WINDOWS\system32\aajmidol.dll>
[{F782EAFE-1A41-4034-B0E3-475587395318}] <C:\WINDOWS\system32\fnoieafe.dll>
[{39BD26A3-3EBB-4D36-AD09-CAF6FA15CB52}] <C:\WINDOWS\system32\jpbdimaj.dll>
[071F4746] <C:\WINDOWS\system32\gnhfknkm.dll>
[9D03E8FA] <C:\WINDOWS\system32\pdgjeofa.dll>
[566DC804] <C:\WINDOWS\system32\lmmdcogk.dll>
[6A01CB5C] <C:\WINDOWS\system32\maghcblc.dll>
[3FC1AE1E] <C:\WINDOWS\system32\jfchaehe.dll>
[79A8EADD] <C:\WINDOWS\system32\npaoeadd.dll>
[513AF83F] <C:\WINDOWS\system32\lhjafojf.dll>
[D2AF021C] <C:\WINDOWS\system32\diafgihc.dll>
[3D568331] <C:\WINDOWS\system32\jdlmojjh.dll>
[23FF1CB6] <C:\WINDOWS\system32\ijffhcbm.dll>
[3AEB1390] <C:\WINDOWS\system32\jaebhjpg.dll>
[25F50862] <C:\WINDOWS\system32\ilflgomi.dll>
[39BD26A3] <C:\WINDOWS\system32\jpbdimaj.dll>
[AA362D85] <C:\WINDOWS\system32\aajmidol.dll>
[F782EAFE] <C:\WINDOWS\system32\fnoieafe.dll>
[3EE22861] <C:\WINDOWS\system32\jeeiiomh.dll>
[22A5C0A9] <C:\WINDOWS\system32\iialcgap.dll>
[IFEO[egui.exe]] <services.exe>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[zx / zx] <\??\C:\DOCUME~1\lenovo\LOCALS~1\Temp\~f7b23e.tmp>
[FltMgr / FltMgr] <\SystemRoot\system32\DRIVERS\fltMgr.sys>
系统修复-- 浏览器加载项之如下项删除:
[] <C:\Program Files\Internet Explorer\PowerJz.zsk>
系统修复-- HOSTS文件--重置
完了,勿运行C盘外任何程序,升级瑞星,全盘杀毒