运行SREng2,使用“启动项目”－－注册表－－删除
C:\DOCUME~1\FAFA\LOCALS~1\Temp\Rxa3\iexp1ore.exe
><C:\WINDOWS\system32\expiorer.exe
C:\Program Files\Microsoft\svhost32.exe
C:\Program Files\Common Files\Microsoft Shared\MSINFO\LSASS.EXE
:\Program Files\Common Files\Microsoft Shared\MSINFO\WinInfo.rxk
C:\DOCUME~1\FAFA\LOCALS~1\Temp\services.exe
C:\DOCUME~1\FAFA\LOCALS~1\Temp\conime.exe
C:\DOCUME~1\FAFA\LOCALS~1\Temp\mhs2.exe

重启按F８进入安全模式下
显示隐藏文件
删除：
C:\DOCUME~1\FAFA\LOCALS~1\Temp\清空文件夹
><C:\WINDOWS\system32\expiorer.exe
C:\Program Files\Microsoft\svhost32.exe
C:\Program Files\Common Files\Microsoft Shared\MSINFO\LSASS.EXE
:\Program Files\Common Files\Microsoft Shared\MSINFO\WinInfo.rxk
C:\WINDOWS\system32\dms.dll


C:\WINDOWS\system32\twunk32.exe
参考
http://forum.ikaka.com/topic.asp?board=28&artid=8237996

O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [HP Software Update] D:\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ms] C:\Program Files\Microsoft\svhost32.exe
O4 - HKLM\..\Run: [zts2] C:\DOCUME~1\FAFA\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [wlzs] C:\DOCUME~1\FAFA\LOCALS~1\Temp\conime.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [mhs2] C:\DOCUME~1\FAFA\LOCALS~1\Temp\mhs2.exe
O4 - HKLM\..\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [myRx3] C:\DOCUME~1\FAFA\LOCALS~1\Temp\Rxa3\iexp1ore.exe
O4 - HKCU\..\Run: [SyztMy] C:\WINDOWS\system32\expiorer.exe

不是病毒，就是垃圾！删除！

引用:

【特攻队2的贴子】要怎么样才能进入安全模式? ………………

开机狂按F8

选择“安全模式”回车