1.建议使用XDelBox删除以下文件:(Xdelbox1.7下载地址:
http://www.qispace.com.cn/read.php/1.htm 的工具19)
使用说明:
先勾选抑制再生,
删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入不检查路径,导入后在要删除文件上点击右键,选择立刻重启删除(不论文件是否存在,继续操作重启删除
),电脑会重启进入DOS界面进行删除操作。
运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。 c:\windows\system32\kcodu32.dll
c:\windows\system32\hbmhly.dll
c:\windows\system32\kcodu32.exe
c:\windows\system32\kncer32.exe
c:\windows\system32\hbinject.exe
c:\windows\system32\dpvvoxmh.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\ddserh.dll
c:\windows\system32\bootvidgj.dll
c:\windows\system32\dispexcb.dll
c:\windows\system32\wrqszl.dll
c:\windows\system32\wklsdd.dll
c:\windows\system32\hufabhsz.dll
c:\windows\system32\tdffdl.dll
c:\windows\system32\jfdses.dll
c:\windows\system32\dntggf.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\sgdewg.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\adsntzt.dll
c:\windows\system32\tdfhex.dll
c:\windows\system32\zycdex.dll
c:\windows\system32\jhfrxz.dll
c:\windows\system32\cliconfgzx.dll
c:\windows\system32\wzcfsw.dll
c:\windows\system32\jdsaex.dll
c:\windows\system32\kbdswjr.dll
c:\windows\system32\catsrvwl.dll
c:\windows\system32\mttwfh.dll
c:\windows\fonts\mnmhisrv.dll
c:\windows\system32\wyhesm.dll
c:\windows\fonts\zywmjime.dll
c:\windows\fonts\lopdfeab.dll
c:\program files\internet explorer\plugins\cdown.sys
c:\windows\system32\nhmxfjkl.dll
c:\windows\fonts\apsghjba.dll
c:\windows\system32\zxmshwin.dll
c:\windows\fonts\zptlesys.dll
c:\program files\internet explorer\plugins\winnt64.sys
c:\windows\fonts\ijdycpaw.dll
c:\windows\fonts\mndhhdwd.dll
c:\windows\system32\drivers\0012ea29.sys
c:\000520dd\000520e5
c:\windows\system32\drivers\msiffei.sys
c:\windows\system32\drivers\hbkernel.sys
c:\windows\system32\drivers\hbkernel.sys
c:\002287a9\002287b1
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
注意该项[AppInit_DLLs]修改:把<HBmhly.dll>修改为<>即清空
[kcodu] <kcodu32.exe>
[kcien32] <kncer32.exe>
[HBService] <HBInject.exe>
[{2876D76C-CAAA-4313-AF97-8D1D9A2A1087}] <C:\WINDOWS\system32\dpvvoxmh.dll>
[{841529CB-7F77-4B99-A895-B5441E0D302F}] <C:\WINDOWS\system32\jfrwdh.dll>
[{A9895933-6636-4281-BC58-EE6DE2AF96E3}] <C:\WINDOWS\system32\ddserh.dll>
[{D3112B69-A745-4805-874E-ABD480EA1299}] <C:\WINDOWS\system32\bootvidgj.dll>
[{76D44356-B494-443a-BEDC-AA68DE4255E6}] <C:\WINDOWS\system32\dispexcb.dll>
[{F99DEFDD-200B-4410-B572-E90883D527D2}] <C:\WINDOWS\system32\wrqszl.dll>
[{E8A3B193-77E3-4FB3-986D-F4FA4828BAFC}] <C:\WINDOWS\system32\wklsdd.dll>
[{21BE5FDF-D4CB-4850-AD99-21E68B50BF3F}] <C:\WINDOWS\system32\hufabhsz.dll>
[{C0595A7E-2E2F-4B34-A83A-019270A0A464}] <C:\WINDOWS\system32\tdffdl.dll>
[{81AF1CF6-D1C9-4C6A-AC01-EDE54E71945B}] <C:\WINDOWS\system32\jfdses.dll>
[{259BF3CF-194D-4FE6-9ADB-DE6544B098B6}] <C:\WINDOWS\system32\dntggf.dll>
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}] <C:\WINDOWS\system32\rfdswc.dll>
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}] <C:\WINDOWS\system32\sgdewg.dll>
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}] <C:\WINDOWS\system32\hhrdxd.dll>
[{E0F3526A-4165-4589-80CD-50B6FBAC3BDA}] <C:\WINDOWS\system32\adsntzt.dll>
[{0B846B26-BFE6-4E8E-A948-1DB17B77B483}] <C:\WINDOWS\system32\tdfhex.dll>
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}] <C:\WINDOWS\system32\zycdex.dll>
[{7914E0AA-ECCB-4311-B584-C49538227824}] <C:\WINDOWS\system32\jhfrxz.dll>
[{7A6DF30E-D0F2-446f-B4F0-BF4232D60E07}] <C:\WINDOWS\system32\cliconfgzx.dll>
[{28766E1C-74B0-4417-8C75-F12AE309EF35}] <C:\WINDOWS\system32\wzcfsw.dll>
[{B29583D8-033A-4B9F-8553-7C5458F3FB8E}] <C:\WINDOWS\system32\jdsaex.dll>
[{432BDC7C-DE5B-43f4-AA81-E7F8AFB0182D}] <C:\WINDOWS\system32\kbdswjr.dll>
[{AF976DCD-754F-4ac2-BE49-951DC7AA57D2}] <C:\WINDOWS\system32\catsrvwl.dll>
[{00070007-0007-0007-0007-00070007BB15}] <C:\WINDOWS\system32\dpvvoxmh.dll>
[{00050005-0005-0005-0005-00050005BB15}] <C:\WINDOWS\system32\cliconfgzx.dll>
[{021F087F-4378-545F-74FA-37D345AD7A8C}] <C:\WINDOWS\system32\mttwfh.dll>
[{9C8D1401-A58D-A81C-CD24-A5915C4517C9}] <C:\WINDOWS\Fonts\mnmhisrv.dll>
[{EB71E0B3-E97D-4D30-8733-E28266467617}] <C:\WINDOWS\system32\wyhesm.dll>
[{A319A1F1-9410-9654-3201-345FFA34913A}] <C:\WINDOWS\Fonts\zywmjime.dll>
[{C629FF4F-ACDB-5C90-A098-FACB3456A26C}] <C:\WINDOWS\Fonts\lopdfeab.dll>
[{5D06580A-08EB-4DD0-8425-DDBB5198B30C}] <C:\Program Files\Internet Explorer\PLUGINS\CDown.sys>
[{67AC9076-C898-B098-D098-A18319080976}] <C:\WINDOWS\system32\nhmxfjkl.dll>
[{9FD45A54-9875-698F-E56E-65102358FDF9}] <C:\WINDOWS\Fonts\apsghjba.dll>
[{AA041F13-A111-12A3-B0CF-F99818AA68AA}] <C:\WINDOWS\system32\zxmshwin.dll>
[{70940F85-F015-14F1-A05F-F69858AC6D07}] <C:\WINDOWS\Fonts\zptlesys.dll>
[{86899D14-95D7-4E22-8AB3-7ACC53076FC9}] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[{3A698452-C5D8-C584-C256-C264C987C5A3}] <C:\WINDOWS\Fonts\ijdycpaw.dll>
[{8C648541-1025-9650-9057-6541258720C8}] <C:\WINDOWS\Fonts\mndhhdwd.dll>
[{48691221-F05C-4AB4-B9D0-50D6D36CC27F}] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[dpvvoxmh.dll] <C:\WINDOWS\system32\dpvvoxmh.dll>
[bootvidgj.dll] <C:\WINDOWS\system32\bootvidgj.dll>
[dispexcb.dll] <C:\WINDOWS\system32\dispexcb.dll>
[ncsktxet.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[adsntzt.dll] <C:\WINDOWS\system32\adsntzt.dll>
[cliconfgzx.dll] <C:\WINDOWS\system32\cliconfgzx.dll>
[mfkahadj.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[ifrmcbah.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[kbdswjr.dll] <C:\WINDOWS\system32\kbdswjr.dll>
[zbdfyqlg.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[jiqhuoqx.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[catsrvwl.dll] <C:\WINDOWS\system32\catsrvwl.dll>
[xhwhnrzg.dll] <C:\WINDOWS\system32\hufabhsz.dll>
[vhmrhuqz.dll] <C:\WINDOWS\system32\hufabhsz.dll>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[0012ea29 / 0012ea29] <\??\C:\WINDOWS\system32\Drivers\0012ea29.sys>
[SZNB / SZNB] <\??\C:\000520DD\000520E5>
[msiffei / msiffei] <System32\Drivers\msiffei.sys>
[HBKernel Driver / HBKernel] <\SystemRoot\system32\DRIVERS\HBKernel.sys>
[HBKernel Driver / HBKernel] <\SystemRoot\system32\DRIVERS\HBKernel.sys>
[xxxALLGUARD / xxxALLGUARD] <\??\C:\002287A9\002287B1>
系统修复-- 浏览器加载项之如下项删除:
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>