O4 - 启动项HKLM\\Run: [Windows Security Protocol] win32sprot.exe
O4 - 启动项HKLM\\Run: [Microsoft Update 32] http.exe
O4 - 启动项HKLM\\Run: [winsysupd] C:\windows\winsysupd5.exe
O4 - 启动项HKLM\\Run: [winsysban] C:\windows\winsysban5.exe
O4 - 启动项HKLM\\Run: [gimmygames] C:\\gimmygames.exe
O4 - 启动项HKLM\\RunServices: [Windows Security Protocol] win32sprot.exe
O4 - 启动项HKLM\\RunServices: [Microsoft Update 32] http.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Windows Security Protocol] win32sprot.exe
O20 - Winlogon Notify: ShellCompatibility - C:\WINDOWS\system32\ir08l5du1.dll
删除相应文件。(全在安全模式下操作)