SREng的基本操作：
http://forum.ikaka.com/topic.asp?board=36&artid=8341507删除启动项
<MsIMMs32><C:\WINDOWS\MsIMMs32.exe> []
<MSDWG32><LYLoadbr.exe> [N/A]
<MSDCG32 ><LYLeador.exe> [N/A]
<MSDOG32><LYLoador.exe> [N/A]
<MSDSG32><LYLoadar.exe> [N/A]
<MSDMG32><LYLoadmr.exe> [N/A]
<MSDHG32><LYLoadhr.exe> [N/A]
<MSDQG32><LYLoadqr.exe> [N/A]
<{798977F1-34FC-4DDD-AF6D-1B5C196B4EB4}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\System6.ins> []
<{5D83AD9C-3BFC-43F5-979D-2904DBC54A8E}><C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys> [N/A]
删除服务
Remote Help Session Manager / Rasautol
禁用驱动
npkycryp / npkycryp
Netgroup Packet Filter / NPF
XDva013 / XDva013
重启系统,显示隐藏文件删除上述有关文件.
