mgr.dll病毒手工清除方法！

（1）使用”冰刃“管理工具，“进程管理”查找svchost.exe进程中的病毒模块名"qmgr.dll"，找到该病毒模块强行结束。

（2） 将%Windir%目录下的dll.bak改名为qmgr.dll拷贝到以下目录里替换qmgr.dll文件即可
%system32%/dllcache/qmgr.dll
%system32%/qmgr.dll
%Windir%/ServicePackFiles/i386/qmgr.dll

（3）恢复被修改的注册表、删除病毒添加的服务
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Services/BITS/Start
新: DWORD: 2 (0x2)
旧: DWORD: 3 (0x3)
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Services/BITS/Type
新: DWORD: 288 (0x120)
旧: DWORD: 32 (0x20)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/BITS/Start
新: DWORD: 2 (0x2)
旧: DWORD: 3 (0x3)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/BITS/Type
新: DWORD: 288 (0x120)
旧: DWORD: 32 (0x20)

HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_BITS/0000/Control/ActiveService
值: 字符串: "BITS"
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_BITS/0000/DeviceDesc
值: 字符串: "Background Intelligent Transfer Service"
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_BITS/0000/Control/ActiveService
值: 字符串: "BITS"
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Enum/Root/LEGACY_BITS/0000/Service
值: 字符串: "BITS"
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Enum/Root/LEGACY_BITS/0000/ClassGUID
值: 字符串: "{8ECC055D-047F-11D1-A537-0000F8753ED1}"