1.建议使用XDelBox删除以下文件：(
XDelBox1.3下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
c:\windows\system32\hbmhly.dll
c:\windows\fonts\lopdfeab.dll
c:\windows\fonts\mndhhdwd.dll
c:\windows\system32\4bf9cba3.dll
c:\windows\system32\7adc2ab1.dll
c:\windows\system32\8143e39d.dll
c:\windows\system32\bootvidgj.dll
c:\windows\system32\cf8850cd.dll
c:\windows\system32\cliconfgzx.dll
c:\windows\system32\xolehlpjh.dll
c:\windows\system32\tscfgwmijxsj.dll
c:\windows\system32\tdfhex.dll
c:\windows\system32\slbiopfs2.dll
c:\windows\system32\mstimewd.dll
c:\windows\system32\lweurqhx.dll
c:\windows\system32\kbdgrms.dll
c:\windows\system32\dpvvoxmh.dll
c:\windows\system32\dispexcb.dll
c:\program files\internet explorer\plugins\winnt64.sys
c:\program files\common files\microsoft shared\msinfo\come_system.sys
7adc2ab1.dll
4bf9cba3.dll
cf8850cd.dll
8143e39d.dll
mcromv.dll wllame.dll mduaey.dll comboaus.dll thermaltinc.dll cxpop.dll lensch.dll johandy.dll catower.dll micsus.dll,aaa.dll,hbmhly.dll
kncer12.exe
kcoud32.exe
explore.exe
c:\windows\system32\hgtuydfs.dll
c:\windows\system32\svchost.exe -k netsvcs-->c:\docume~1\admini~1\locals~1\temp\1799078_res.tmp
c:\windows\system32\drivers\msiffei.sys
c:\windows\system32\ixpt.sys
c:\windows\system32\drivers\hbkernel.sys
c:\windows\system32\dbeaf7d.sys
2.删除重启后使用SREng修复下面各项：
启动项目 －－ 注册表之如下项删除：
[tscfgwmijxsj.dll] <C:\WINDOWS\system32\tscfgwmijxsj.dll>
[cliconfgzx.dll] <C:\WINDOWS\system32\cliconfgzx.dll>
[slbiopfs2.dll] <C:\WINDOWS\system32\slbiopfs2.dll>
[lweurqhx.dll] <C:\WINDOWS\system32\lweurqhx.dll>
[mstimewd.dll] <C:\WINDOWS\system32\mstimewd.dll>
[tscfgwmijxsj.dll] <C:\WINDOWS\system32\tscfgwmijxsj.dll>
[cliconfgzx.dll] <C:\WINDOWS\system32\cliconfgzx.dll>
[slbiopfs2.dll] <C:\WINDOWS\system32\slbiopfs2.dll>
[lweurqhx.dll] <C:\WINDOWS\system32\lweurqhx.dll>
[mstimewd.dll] <C:\WINDOWS\system32\mstimewd.dll>
[dispexcb.dll] <C:\WINDOWS\system32\dispexcb.dll>
[bootvidgj.dll] <C:\WINDOWS\system32\bootvidgj.dll>
[xolehlpjh.dll] <C:\WINDOWS\system32\xolehlpjh.dll>
[kbdgrms.dll] <C:\WINDOWS\system32\kbdgrms.dll>
[dpvvoxmh.dll] <C:\WINDOWS\system32\dpvvoxmh.dll>
[{2CB77746-8ECC-40ca-8217-10CA8BE5EFC8}] <C:\WINDOWS\system32\tscfgwmijxsj.dll>
[{7ADC2AB1-5C6A-4178-82DA-94863354AF7C}] <7ADC2AB1.dll>
[{4BF9CBA3-8DEE-41A1-8BDB-FC28D30E949F}] <4BF9CBA3.dll>
[{CF8850CD-885D-4380-9E1B-8C987F011437}] <CF8850CD.dll>
[{8143E39D-9072-40D0-AF2F-31CDF7F72B16}] <8143E39D.dll>
[{0B846B26-BFE6-4E8E-A948-1DB17B77B483}] <C:\WINDOWS\system32\tdfhex.dll>
[{48691221-F05C-4AB4-B9D0-50D6D36CC27F}] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[{7A6DF30E-D0F2-446f-B4F0-BF4232D60E07}] <C:\WINDOWS\system32\cliconfgzx.dll>
[{EB9660D8-E1CD-4ff0-B4A9-00CD907F928A}] <C:\WINDOWS\system32\slbiopfs2.dll>
[{71A78CD4-E470-4a18-8457-E0E0283DD507}] <C:\WINDOWS\system32\lweurqhx.dll>
[{C629FF4F-ACDB-5C90-A098-FACB3456A26C}] <C:\WINDOWS\Fonts\lopdfeab.dll>
[{65056902-6E7B-4bd7-95BA-688DB5FA5BEB}] <C:\WINDOWS\system32\mstimewd.dll>
[{76D44356-B494-443a-BEDC-AA68DE4255E6}] <C:\WINDOWS\system32\dispexcb.dll>
[{D3112B69-A745-4805-874E-ABD480EA1299}] <C:\WINDOWS\system32\bootvidgj.dll>
[{F0930A2F-D971-4828-8209-B7DFD266ED44}] <C:\WINDOWS\system32\xolehlpjh.dll>
[{8C648541-1025-9650-9057-6541258720C8}] <C:\WINDOWS\Fonts\mndhhdwd.dll>
[{E560642D-A32D-432c-9E7E-9A135CC37E0F}] <C:\WINDOWS\system32\kbdgrms.dll>
[{2876D76C-CAAA-4313-AF97-8D1D9A2A1087}] <C:\WINDOWS\system32\dpvvoxmh.dll>
[{5B77087D-AB76-4C22-B0A6-C34D1F438E55}] <C:\Program Files\Common Files\Microsoft Shared\MSInfo\Come_System.sys>
注意该项[AppInit_DLLs]修改：把<mcromv.dll wllame.dll mduaey.dll comboaus.dll thermaltinc.dll cxpop.dll lensch.dll johandy.dll catower.dll micsus.dll,aaa.dll,HBmhly.dll>修改为<>即清空
[kcien12] <kncer12.exe>
[kcoud] <kcoud32.exe>
[HBService] <explore.exe>
[vvmjudqh.dll] <C:\WINDOWS\system32\hgtuydfs.dll>
[hgtuydfs.dll] <C:\WINDOWS\system32\hgtuydfs.dll>
[tkjhycqi.dll] <C:\WINDOWS\system32\hgtuydfs.dll>
启动项目 －－ 服务 －－ Win32服务应用程序之如下项禁用：
[Background Intelligent Transfer Service / BITS] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1799078_res.tmp>
[Background Intelligent Transfer Service / BITS] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1799078_res.tmp>
启动项目 －－ 服务－－ 驱动程序之如下项禁用：
[msiffei / msiffei] <System32\Drivers\msiffei.sys>
[iXPT / iXPT] <\??\C:\WINDOWS\system32\iXPT.sys>
[HBKernel Driver / HBKernel] <\SystemRoot\system32\DRIVERS\HBKernel.sys>
[dbeaf7d / dbeaf7d] <\??\C:\WINDOWS\system32\dbeaf7d.sys>
系统修复－－ 浏览器加载项之如下项删除：
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
[] <C:\Program Files\Internet Explorer\PLUGINS\WinNt64.Sys>
