有的就处理,没有的就不处理
你要处理的有这些:
下载冰刃(冰刃1.22地址：http://www.onlinedown.net/soft/53325.htm)
删除文件
C:\WINNT\system32\rarjbpi.dll> [N/A]
C:\WINNT\system32\avzxemn.dll> [N/A]
C:\WINNT\system32\raqjdpi.dll> [N/A]
C:\WINNT\system32\avwgemn.dll> [N/A]
C:\WINNT\system32\sidjbzy.dll> [N/A]
C:\WINNT\system32\kaqhhzy.dll> [N/A]
C:\WINNT\system32\rsmygpm.dll> [N/A]
C:\WINNT\system32\kapjdzy.dll> [N/A]
\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
C:\WINNT\system32\serdst.exe><N/A>
C:\WINNT\system32\cdcd.sys
C:\WINNT\System32\new.sys
C:\WINNT\system32\SVKP.sys
C:\WINNT\system32\TcpIpDog0.dll
用SRENG删除
注册表:
<MSDCG32 ><LYLeador.exe> [N/A]
<{2598FF45-DA60-F48A-BC43-10AC47853D52}><C:\WINNT\system32\rarjbpi.dll> [N/A]
<{5859245F-345D-BC13-AC4F-145D47DA34F5}><C:\WINNT\system32\avzxemn.dll> [N/A]
<{44783410-4F90-34A0-7820-3230ACD05F44}><C:\WINNT\system32\raqjdpi.dll> [N/A]
<{5A1247C1-53DA-FF43-ABD3-345F323A48D5}><C:\WINNT\system32\avwgemn.dll> [N/A]
<{28847374-8323-FADC-B443-4732ABCD3782}><C:\WINNT\system32\sidjbzy.dll> [N/A]
<{87D81718-1314-5200-2597-587901018078}><C:\WINNT\system32\kaqhhzy.dll> [N/A]
<{7E32FA58-3453-FA2D-BC49-F340348ACCE7}><C:\WINNT\system32\rsmygpm.dll> [N/A]
<{4A321487-4977-D98A-C8D5-6488257545A4}><C:\WINNT\system32\kapjdzy.dll> [N/A]
服务
[grnaj / grnaj][Stopped/Disabled]
<"\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
[idmgq / idmgq][Stopped/Disabled]
<"\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
[rwqrx / rwqrx][Stopped/Disabled]
<"\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
[suyoyo / suyoyo][Stopped/Disabled]
<"\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
[udwvrw / udwvrw][Stopped/Disabled]
<"\\172.16.27.36\admin$\sysconf.exe" -service><N/A>
[Telephotsgoogle / Wdswsdewn][Stopped/Auto Start]
<C:\WINNT\system32\serdst.exe><N/A>
驱动
[Cdsys / Cdsys][Stopped/Manual Start]
<\??\C:\WINNT\system32\cdcd.sys><N/A>
[New0 / New0][Stopped/Auto Start]
<\??\C:\WINNT\System32\new.sys><N/A>
[SVKP / SVKP][Stopped/Auto Start]
<\??\C:\WINNT\system32\SVKP.sys><N/A>
修复Winsock 提供者
修复文件关联
下载arswp(Windows清理助手)清理下..
http://www.arswp.com/download/arswp/arswp.rar
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空临时文件夹：
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
