我的解法如下:....

(1)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"LangID"=hex:04,04
"C:\\WINDOWS\\system32\\ibm.exe"="ibm"

(2)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ibm"="C:\\WINDOWS\\system32\\ibm.exe"

(3)
[HKEY_USERS\S-1-5-21-484763869-113007714-1801674531-500\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"LangID"=hex:04,04
"C:\\PROGRA~1\\svhost.exe"="svhost"

(4)
[HKEY_USERS\S-1-5-21-484763869-113007714-1801674531-500\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"DebugOptions"="2048"
"Documents"=""
"DosPrint"="no"
"load"="C:\\PROGRA~1\\svhost.exe"
"NetMessage"="no"
"NullPort"="None"
"Programs"="com exe bat pif cmd"

....先修改登錄檔將.ibm.exe ibm.dll T1dll.dll svhost.exe 刪之(含上列路徑)
然後重新開機看是否還存在.因為防毒軟體有的刪不掉..

希望大家都安全

感謝康慨分享及用心整理，好心有好報喔！