下面的全部到安全模式刪除
註冊表
<AppInit_DLLs><wpuplder.dll welldon.dll mpackl.dll quaryfy.dll,c:\progra~1\kasper~1\kasper~1.0\adialhk.dll,yzztjmsn.dll,nhmxcjkl.dll> [N/A]
[color=red]這一項請按編輯全部刪除後只留下 c:\progra~1\kasper~1\kasper~1.0\adialhk.dll 這個，其他的請直接刪除[/color]
服務
[BoBoTurbo / BoBoTurbo][Running/Auto Start]
<C:\WINDOWS\system32\BoBoTurbo\BoBoTurbo.exe><?州易播信息科技有限公司>
驅動程式
[21fe265432bb55fd / 21fe265432bb55fd][Stopped/Manual Start]
<\??\C:\21fe265432bb55fd.dat><N/A>
[3d184af4ab507768 / 3d184af4ab507768][Stopped/Manual Start]
<\??\C:\3d184af4ab507768.dat><N/A>
[52852dc029fedca2 / 52852dc029fedca2][Stopped/Manual Start]
<\??\C:\52852dc029fedca2.dat><N/A>
[78692fc48adc3062 / 78692fc48adc3062][Stopped/Manual Start]
<\??\C:\78692fc48adc3062.dat><N/A>
[7f5690e8401f3550 / 7f5690e8401f3550][Stopped/Manual Start]
<\??\C:\7f5690e8401f3550.dat><N/A>
[830c352cde455336 / 830c352cde455336][Stopped/Manual Start]
<\??\C:\830c352cde455336.dat><N/A>
[93531cf85becf079 / 93531cf85becf079][Stopped/Manual Start]
<\??\C:\93531cf85becf079.dat><N/A>
[966401dcd4dcd92f / 966401dcd4dcd92f][Stopped/Manual Start]
<\??\C:\966401dcd4dcd92f.dat><N/A>
[a9bbce8c08fbdfe0 / a9bbce8c08fbdfe0][Stopped/Manual Start]
<\??\C:\a9bbce8c08fbdfe0.dat><N/A>
[b41123fced2b895a / b41123fced2b895a][Stopped/Manual Start]
<\??\C:\b41123fced2b895a.dat><N/A>
[ba809dbcd40abd39 / ba809dbcd40abd39][Stopped/Manual Start]
<\??\C:\ba809dbcd40abd39.dat><N/A>
[c4580bc8aa048444 / c4580bc8aa048444][Stopped/Manual Start]
<\??\C:\c4580bc8aa048444.dat><N/A>
[e9196708b9022a06 / e9196708b9022a06][Stopped/Manual Start]
<\??\C:\e9196708b9022a06.dat><N/A>
[f006c82ce2dd374c / f006c82ce2dd374c][Stopped/Manual Start]
<\??\C:\f006c82ce2dd374c.dat><N/A>
[fc980bb417b9c9f0 / fc980bb417b9c9f0][Stopped/Manual Start]
<\??\C:\fc980bb417b9c9f0.dat><N/A>
瀏覽器載入項
{25FD6584-698F-BCD2-602C-698745210352} <C:\WINDOWS\system32\rijxbkin.dll, N/A>
{37AC9076-C898-B098-D098-A18319080973} <C:\WINDOWS\system32\nhmxcjkl.dll, N/A>
{50940F85-F015-14F1-A05F-F69858AC6D05} <C:\WINDOWS\system32\zptlcsys.dll, N/A>
{6A041F13-A111-12A3-B0CF-F99818AA68A6} <C:\WINDOWS\system32\zxmscwin.dll, N/A>
{A490415F-65F8-B5C5-D8BA-9405FB12054A} <C:\WINDOWS\system32\yzztjmsn.dll, N/A>
C:\WINDOWS\system32\BoBoTurbo\BoBoTurbo.exe
C:\WINDOWS\system32\mpacklk.exe
C:\WINDOWS\system32\rijxbkin.dll
C:\WINDOWS\system32\nhmxcjkl.dll
C:\WINDOWS\system32\zptlcsys.dll
C:\WINDOWS\system32\zxmscwin.dll
C:\WINDOWS\system32\yzztjmsn.dll
C:\WINDOWS\system32\wpuplder.dll
C:\WINDOWS\system32\welldon.dll
C:\WINDOWS\system32\mpackl.dll
C:\WINDOWS\system32\quaryfy.dll