D:\setup.exe 压缩 发送bin59420@yahoo.com.cn
用sreng
删除启动项目=>注册表
<svcshare><C:\WINDOWS\system32\drivers\spoclsv.exe> [N/A]
<myMh2><C:\DOCUME~1\马帅\LOCALS~1\Temp\mh2\iexpl0re.EXE> [N/A]
<myZt3><C:\DOCUME~1\马帅\LOCALS~1\Temp\zt3\SVCHQST.EXE> [N/A]
<myWl2><C:\DOCUME~1\马帅\LOCALS~1\Temp\Wl2\lexplore.exe> [N/A]
<wdfmgr32><C:\WINDOWS\system32\wdfmgr32.exe> [N/A]
<System><C:\Program Files\Common Files\System\Updaterun.exe> [N/A]
<{08315C1A-9BA9-4B7C-A432-26885F78DF28}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp> [N/A]
<{729B6C61-BDC5-4C09-A1DE-A296BA0B89EC}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp> [N/A]
<{DD7D4640-4464-48C0-82FD-21338366D2D2}><C:\Program Files\Internet Explorer\InfoMs.tdm> [N/A]
用sreng
删除启动项目=>服务
[System Event Logger / BKMARKS][Running/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\SVLVX.DLL,Export 1087><N/A>
[smService / smService][Running/Auto Start]
<C:\WINDOWS\system32\smService.exe><N/A>
[system / system][Stopped/Auto Start]
<C:\WINDOWS\Server.exe><N/A>
删除文件
C:\WINDOWS\system32\wdfmgr32.exe
C:\Program Files\Common Files\System\Updaterun.exe
C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp
C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp
C:\Program Files\Internet Explorer\InfoMs.tdm
C:\WINDOWS\Server.exe
C:\WINDOWS\system32\smService.exe
安全模式清空
C:\DOCUME~1\马帅\LOCALS~1\Temp\
打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
搜索 smService system 删除...
下个卡卡上网助手清一下流氓软件..
