你需要删除的文件有
[C:\WINDOWS\system32\bfzvjp.dll] [N/A, ]
[C:\WINDOWS\system32\pruizi.dll] [N/A, ]
[C:\WINDOWS\system32\mlfykq.dll] [N/A, ]
[C:\WINDOWS\system32\pohqlw.dll] [N/A, ]
[C:\WINDOWS\system32\pcwdis.dll] [N/A, ]
[C:\WINDOWS\system32\rppzag.dll] [N/A, ]
[C:\WINDOWS\system32\mjjqcq.dll] [N/A, ]
[C:\WINDOWS\system32\kzjbku.dll] [N/A, ]
每个分区的auto.exe Autorun.inf
C:\WINDOWS\kzjbku.exe> []
C:\WINDOWS\kzjbku.exe> []
C:\WINDOWS\mjjqcq.exe> []
C:\WINDOWS\kqlnrd.exe> []
C:\WINDOWS\mlfykq.exe> []
C:\WINDOWS\pohqlw.exe> []
C:\WINDOWS\rppzag.exe> []
C:\WINDOWS\pcwdis.exe> []
C:\WINDOWS\IGM.exe> []
C:\WINDOWS\bfzvjp.exe> []
C:\WINDOWS\system32\zinforms.dll
C:\WINDOWS\system32\winforms.dll
注册表中需要删除的
<GenProtect><C:\WINDOWS\kzjbku.exe> []
<Kvsc3><C:\WINDOWS\kzjbku.exe> []
<AVPSrv><C:\WINDOWS\mjjqcq.exe> []
<NVDispDrv><C:\WINDOWS\kqlnrd.exe> []
<MsPrint32D><C:\WINDOWS\mlfykq.exe> []
<cmdbcs><C:\WINDOWS\pohqlw.exe> []
<upxdnd><C:\WINDOWS\rppzag.exe> []
<msccrt><C:\WINDOWS\pcwdis.exe> []
<WinSysM><C:\WINDOWS\IGM.exe> []
<DbgHlp32><C:\WINDOWS\bfzvjp.exe> []
<{AEB6717E-7E19-11d0-97EE-00C04FD91974}><winforms.dll> []
<{AEB6717E-7E19-11d0-97EE-00C04FD91975}><zinforms.dll> []
把[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\WINDOWS\system32\zinforms.dll> []设置为空
删除服务
[87206BCE / 87206BCE][Stopped/Auto Start]
<C:\WINDOWS\system32\C13F8013.EXE -k><N/A>
