<WinForm><C:\WINNT\WinForm.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{0EA66AD2-CF26-2E23-532B-B292E22F3266}><C:\Program Files\Internet Explorer\PLUGINS\NewTemp.dll> []
[C:\WINNT\system32\WinForm.dll] [N/A, ]
[C:\WINNT\system32\ztinetzt.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\WINNT\system32\nwizAsktao.dll] [N/A, ]
[C:\WINNT\system32\dh2104.dll] [N/A, ]
[C:\WINNT\system32\nwizzhuxians.dll] [N/A, ]
[C:\Program Files\Internet Explorer\PLUGINS\System64.Sys] [N/A, ]
[C:\WINNT\system32\TIMHost.dll] [N/A, ]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8168.0]
清空C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
删除autorun.inf
