运行sreng启动项目--注册表删除
<mshtmll><regsvr32 /s C:\WINDOWS\inf\mshtmll.dll> [N/A]
<{AC4C902A-0960-2052-0714-040916200056}><"C:\Program Files\Common Files\{AC4C902A-0960-2052-0714-040916200056}\Update.exe" mc-110-12-0000603> [N/A]
删除服务--WIN32服务
[Internet Connection Manager / Internet Connection Manager][Stopped/Auto Start]
<"C:\WINDOWS\system32\internet.exe"><N/A>
[DNS Cache / iSPONER][Running/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE C:\WINDOWS\SYSTEM32\WBEM\KBONZ.DLL,Export 1087><Microsoft Corporation>
[Automatic Updates / wuauserv][Stopped/Auto Start]
<C:\WINDOWS\system32\serivces.exe><N/A>
[yjjksi / yjjksi][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\ljjksi\ljjksi.dll>< >
安全模式下删除:
C:\WINDOWS\inf\mshtmll.dll
C:\Program Files\Common Files\{AC4C902A-0960-2052-0714-040916200056}\Update.exe
C:\WINDOWS\system32\internet.exe
C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE
C:\WINDOWS\SYSTEM32\WBEM\KBONZ.DLL
C:\WINDOWS\system32\serivces.exe
C:\PROGRA~1\ljjksi 此文件夹
