ravmsmon.exe、rsmyapm.dll、rsztapm.dll、systems.exe、smService.exe病毒的清除方法

  进入安全模式下操作(重启系统长按F8直到出现提示,然后选择进入安全模式):

  手工清除方法(参考):

  1、删除以下文件 可借助Xdelbox

  下载网址:http://www.motoyi.com/Down/Noted/200710/Down_84.shtml









  C:\Program Files\NetMeeting\ravmsmon.exe

  C:\Program Files\Common Files\Microsoft Shared\MSINFO\System6.ins

  C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys

  C:\WINDOWS\system32\avzxamn.dll

  C:\WINDOWS\system32\rsmyapm.dll

  C:\WINDOWS\system32\rsztapm.dll

  C:\WINDOWS\system32\rsjzapm.dll

  C:\WINDOWS\system32\avwlamn.dll

  C:\WINDOWS\system32\smService.exe

  C:\WINDOWS\system32\systems.exe

  2、使用SReng删除如下各项

  SReng下载网址:http://www.motoyi.com/Down/Noted/200705/Down_28.shtml



  启动项目--》注册表下的如下项目删除:









[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

<ravmsmon><C:\Program Files\NetMeeting\ravmsmon.exe> []



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

<{798977F1-34FC-4DDD-AF6D-1B5C196B4EB4}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\System6.ins> []

<{5D83AD9C-3BFC-43F5-979D-2904DBC54A8E}><C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys> []

<{1859245F-345D-BC13-AC4F-145D47DA34F1}><C:\WINDOWS\system32\avzxamn.dll> [N/A]

<{1E32FA58-3453-FA2D-BC49-F340348ACCE1}><C:\WINDOWS\system32\rsmyapm.dll> [N/A]

<{134345F1-DACF-3452-CB7D-4620F34A1531}><C:\WINDOWS\system32\rsztapm.dll> [N/A]

<{12FAACDE-34DA-CCD4-AB4D-DA34485A3421}><C:\WINDOWS\system32\rsjzapm.dll> [N/A]

<{1960356A-458E-DE24-BD50-268F589A56A1}><C:\WINDOWS\system32\avwlamn.dll> [N/A]



  启动项目 服务Win32服务应用程序 的如下项删除









[smService / smService][Running/Auto Start]

<C:\WINDOWS\system32\smService.exe><N/A>

[systems / systems][Running/Auto Start]

<C:\WINDOWS\system32\systems.exe><Microsoft Corporatio>