删除以下：
启动项目
<asgfdjs2><C:\WINDOWS\system32\vbsdaas2.exe> []
<mppds><C:\WINDOWS\mppds.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<MSDEG32><LYLoader.exe> []
<MSDWG32><LYLoadbr.exe> [N/A]
<MSDCG32 ><LYLeador.exe> [N/A]
<MSDOG32><LYLoador.exe> [N/A]
<MSDSG32><LYLoadar.exe> [N/A]
<MSDMG32><LYLoadmr.exe> []
<MSDHG32><LYLoadhr.exe> [N/A]
<MSDQG32><LYLoadqr.exe> [N/A]
<{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll> [Beijing Rising Technology Co., Ltd.]
<{5731EA1D-6AAF-4DE9-BDDA-7B390A75B286}><C:\WINDOWS\system32\xk1s0.dll> []
<{DC7596CB-D6CC-DCA3-DE52-DEEA63F6C61D}><C:\Program Files\Internet Explorer\rksldk.dll> [Microsoft Corporation]
<{ACADABAF-0000-0010-8000-10AA006D2EA4}><C:\WINDOWS\system32\system.dat> []
<{A2b4AdAc-0000-0010-8000-00AA006D2EA5}><C:\WINDOWS\system32\wpsys32.dat> []
<{A771A1EC-975E-4798-AF5E-A3F552D45C41}><C:\WINDOWS\system32\WMDLL.dll> []
<{A771A1EC-975E-4718-AF5E-A3F552D45C41}><C:\WINDOWS\system32\WLDLL.dll> []
<{A771A1EC-975E-4788-AF5E-A3F552D45C41}><C:\WINDOWS\system32\ZXDLL.dll> []
<?{E03C23BD-35B7-49C2-BBCA-6D8CEC2507E3}><hook wl> [N/A]
<?{A3C95A74-638D-4C6B-A856-4B27664A7F47}><hook wg> [N/A]
<?{074616A6-5ADC-4A3F-B252-E1D605228B5C}><hook wm> [N/A]
<?{6826A3DB-EA8E-4E67-880D-53D04C7C0BD8}><hook qj> [N/A]
<?{EDFF29C1-5A70-4460-AC1D-16DCB4B672F0}><hook rx> [N/A]
<?{08E909A4-B236-48DD-8BCC-90A604B93E68}><hook tl> [N/A]
<?{D8CC4845-441C-44F8-9053-28F2EF67655B}><hook da> [N/A]
<?{68F7767A-090C-4BBF-A015-720ACC6706E2}><hook wd> [N/A]
<?{781FBCC1-99C7-4AE0-95F7-66EA49E86DD7}><hook zx> [N/A]
<?{4E3FBFA4-F1CC-4B66-B333-B9F0FF4B4748}><hook my> [N/A]
<?{ABD0935D-B35A-47BD-BA9A-81678DDE74DD}><hook qh> [N/A]
<?{BD9B003B-0BE6-4528-A9D9-B8DBACAC6B9B}><hook fy> [N/A]
<?{71046DD5-E136-4C4B-A6B5-91C30CB15291}><hook jt> [N/A]
<?{E952B8F8-D91A-4EDD-851C-EE1A0F944469}><hook zt> [N/A]
<?{3422FB0F-95EB-458A-8B56-39552017A4EF}><hook mh> [N/A]
<{EDFF29C1-5A70-4460-AC1D-16DCB4B672F0}><C:\WINDOWS\system32\rxdoor0.dll> []
<{68F7767A-090C-4BBF-A015-720ACC6706E2}><C:\WINDOWS\system32\wddoor1.dll> []
<{781FBCC1-99C7-4AE0-95F7-66EA49E86DD7}><C:\WINDOWS\system32\zxdoor1.dll> []
<{D8CC4845-441C-44F8-9053-28F2EF67655B}><C:\WINDOWS\system32\dadoor1.dll> []
<{E03C23BD-35B7-49C2-BBCA-6D8CEC2507E3}><C:\WINDOWS\system32\wldoor1.dll> []
<{A3C95A74-638D-4C6B-A856-4B27664A7F47}><C:\WINDOWS\system32\wgdoor1.dll> []
<{3422FB0F-95EB-458A-8B56-39552017A4EF}><C:\WINDOWS\system32\mhdoor1.dll> []
<{4E3FBFA4-F1CC-4B66-B333-B9F0FF4B4748}><C:\WINDOWS\system32\mydoor1.dll> []
<{71046DD5-E136-4C4B-A6B5-91C30CB15291}><C:\WINDOWS\system32\jtdoor1.dll> []
<{074616A6-5ADC-4A3F-B252-E1D605228B5C}><C:\WINDOWS\system32\wmdoor1.dll> []
<{ABD0935D-B35A-47BD-BA9A-81678DDE74DD}><C:\WINDOWS\system32\qhdoor1.dll> []
<{E952B8F8-D91A-4EDD-851C-EE1A0F944469}><C:\WINDOWS\system32\ztdoor1.dll> []
<{6826A3DB-EA8E-4E67-880D-53D04C7C0BD8}><C:\WINDOWS\system32\qjdoor0.dll> []
<{08E909A4-B236-48DD-8BCC-90A604B93E68}><C:\WINDOWS\system32\tldoor1.dll> []
<{BD9B003B-0BE6-4528-A9D9-B8DBACAC6B9B}><C:\WINDOWS\system32\fydoor1.dll> []
驱动程序
<\??\C:\WINDOWS\system32\drivers\jv2i2y4qv0.sys><N/A>
<\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
结束正在运行的以下进程：
WLDLL.dll
SYNCOR11.DLL
winlib .dll
xk1s0.dll
wpsys32.dat
ZXDLL.dll
rpp7vyz1.dll
SHQMANGR.DLL
mppds.dll
c:\windows\system32\cmd.exe（删除）
c:\windows\system32\dllcache\cmd.exe（这个不一定有，里面有就删了）
文件夹选项->工具->查看->显示隐藏文件和文件夹前（打勾）
结束后全盘查找这些进程文件路径位置即相关文件类型并删除！
结束不了的病毒进程用冰刃直接找到文件位置删除
再次扫描日志上传！
