同上

Running Processes
[PID: 740][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 788][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 812][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\System32\LgNotify.dll]  <Intel Corporation><4, 1, 0, 0>
    [C:\WINDOWS\system32\NavLogon.dll]  <Symantec Corporation><10.0.2.2020>
[PID: 856][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 868][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1028][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1100][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1160][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1236][C:\WINDOWS\System32\S24EvMon.exe]  <Intel Corporation ><4, 2, 0, 1>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1284][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1400][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1560][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe]  <Symantec Corporation><103.5.7.3>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL]  <Symantec Corporation><1,5,1,3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  <Symantec Corporation><1,5,1,3>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCLOGIN.DLL]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCPXYEVT.DLL]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\LOGFWDER.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\WINDOWS\system32\SymNeti.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\NISEVT.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliproxy.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVNTUTL.DLL]  <Symantec Corporation><10.0.2.2020>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\nts.dll]  <LANDesk Software Ltd.><6.12.0.141 E>
    [C:\WINDOWS\system32\cba.dll]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\PDS.DLL]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\SNLog.dll]  <Symantec Corporation><8.6.2.152>
[PID: 1588][C:\Program Files\Common Files\Symantec Shared\ccProxy.exe]  <Symantec Corporation><103.5.7.3>
    [C:\WINDOWS\system32\SYMREDIR.dll]  <Symantec Corporation><6.0.1.105>
    [C:\WINDOWS\system32\SymNeti.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\DPHTML.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\DPJS.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\DPVBS.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PFAdBlk.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PFMisc.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PFPriv.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PFSec.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PxyHTTP.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\DPHTTP.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\PxyIM.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccPxyEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccLogin.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccCharCv.dll]  <Symantec Corporation><103.5.7.3>
[PID: 1700][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.7.3>
[PID: 1712][C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe]  <Symantec Corporation><8.6.2.152>
    [C:\WINDOWS\system32\SymNeti.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\NISRES.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  <Symantec Corporation><103.5.7.3>
[PID: 1792][C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe]  <Symantec Corporation><6.0.1.105>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\system32\SymNeti.dll]  <Symantec Corporation><6.0.1.105>

[PID: 176][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 272][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\SYSTEM32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 312][C:\WINDOWS\system32\cisvc.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 332][C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 372][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  <Microsoft Corporation><7.00.9466>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 420][C:\WINDOWS\System32\RegSrvc.exe]  <Intel Corporation><4, 1, 0, 0>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 448][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe]  <Analog Devices, Inc.><3, 2, 6, 0>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 464][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 500][C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\CBA.DLL]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\NTS.dll]  <LANDesk Software Ltd.><6.12.0.141 E>
    [C:\WINDOWS\system32\PDS.DLL]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVLU.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVNTUTL.DLL]  <Symantec Corporation><10.0.2.2020>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\I2ldvp3.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccDec.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll]  <Symantec Corporation><3.02.14.08>
    [C:\Program Files\Common Files\Symantec Shared\ccScan.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  <Symantec Corporation><51.2.0.12>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060617.005\ccEraser.dll]  <Symantec Corporation><106.1.5.2>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefUtDCD.dll]  <Symantec Corporation><3.1.13a.0>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060617.005\ecmsvr32.dll]  <Symantec Corporation><61.1.0.11>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060617.005\NAVEX32a.DLL]  <Symantec Corporation><20061.1.0.14>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060617.005\NAVENG32.DLL]  <Symantec Corporation><20061.1.0.14>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVAP32.DLL]  <Symantec Corporation><9.7.1.4>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.7.1.4>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\IMail.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\vpmsece3.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SymProtectStorage.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  <Symantec Corporation><1,5,1,3>
    [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliscan.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Common Files\Symantec Shared\SSC\LDVPCtls.ocx]  <Symantec Corporation><10.0.2.2020>
[PID: 556][C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe]  <Symantec Corporation><8.6.2.152>
    [C:\WINDOWS\system32\SymNeti.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\NisEvt.dll]  <Symantec Corporation><8.6.2.152>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.7.3>
[PID: 664][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 1060][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>

[PID: 2720][C:\WINDOWS\system32\ZCfgSvc.exe]  <Intel Corporation><4, 2, 0, 4>
    [C:\WINDOWS\system32\PfMgrApi.dll]  <Intel Corporation><4, 2, 0, 1>
    [C:\WINDOWS\system32\PsRegApi.dll]  <Intel Corporation><4, 1, 0, 0>
    [C:\WINDOWS\system32\WConfig.DLL]  <Intel Corporation><4, 2, 0, 3>
    [C:\WINDOWS\system32\WiFiAdap.DLL]  <Intel Corporation><4, 1, 0, 0>
    [C:\WINDOWS\system32\C1XStngs.dll]  <><4, 2, 0, 2>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\ZcSvcCHS.dll]  <Intel Corporation><4, 2, 0, 4>
    [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\PmApiCHS.dll]  <Intel Corporation><4, 2, 0, 1>
    [C:\WINDOWS\system32\S24MUDLL.dll]  <Intel Corporation><4, 1, 0, 0>
    [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\C1XStCHS.dll]  <><4, 2, 0, 2>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2908][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\zepsoft\Wallpaper Calendar\MHookWC.dll]  <Zepsoft><1.0.6.10>
    [C:\WINDOWS\downlo~1\cnshook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll]  <Symantec Corporation><10.0.2.2020>
[PID: 3092][C:\WINDOWS\System32\1XConfig.exe]  <Intel><4, 2, 0, 0>
    [C:\WINDOWS\System32\IntelAE5.dll]  <Meetinghouse Data Communications><1, 42, 19, 1>
    [C:\WINDOWS\System32\SSLEAY32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\LIBEAY32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\PsRegApi.dll]  <Intel Corporation><4, 1, 0, 0>
    [C:\WINDOWS\System32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 3204][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\downlo~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 4>
    [C:\WINDOWS\downlo~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 5>
    [C:\WINDOWS\downlo~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 3, 1>
[PID: 3728][C:\Program Files\Apoint2K\Apoint.exe]  <Alps Electric Co., Ltd.><6.0.1.159>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\system32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.1.59>
    [C:\Program Files\Apoint2K\ApMain.DLL]  <Alps Electric Co., Ltd.><6.0.1.10>
    [C:\Program Files\Apoint2K\ApCommon.dll]  <Alps Electric Co., Ltd.><6.0.2.16>
    [C:\Program Files\Apoint2K\ApDual.dll]  <Alps Electric Co., Ltd.><6.0.1.14>
    [C:\Program Files\Apoint2K\ApPad.dll]  <Alps Electric Co., Ltd.><6.0.1.35>
    [C:\Program Files\Apoint2K\EzCapt.dll]  <Alps Electric Co., Ltd.><6.0.1.14>
    [C:\Program Files\Apoint2K\EzLaunch.dll]  <Alps Electric Co., Ltd.><6.0.1.25>
    [C:\Program Files\Apoint2K\ApStick.dll]  <ALPS Electric Co., Ltd.><6.0.1.28>
    [C:\Program Files\Apoint2K\ApOthers.dll]  <Alps Electric Co., Ltd.><6.0.1.15>
    [C:\Program Files\Apoint2K\ApMouse.dll]  <ALPS Electric Co., Ltd.><6.0.1.25>
    [C:\Program Files\Apoint2K\EzAuto.dll]  <Alps Electric Co., Ltd.><4.5.1.83>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Apoint2K\ApString.dll]  <Alps Electric Co., Ltd.><6.0.301.27>
[PID: 3776][C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE]  <TOSHIBA><1, 0, 2, 9>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\TMEVALDD.dll]  <Tohsiba><1, 0, 0, 3>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 3808][C:\WINDOWS\system32\TPWRTRAY.EXE]  <TOSHIBA Corporation><6.00.21>
    [C:\WINDOWS\system32\TPwrReg.dll]  <TOSHIBA Corporation><6.00.9>
    [C:\WINDOWS\system32\Tdevdetect.dll]  <TOSHIBA Corporation><6.00.21>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\system32\TSCI.DLL]  <Toshiba><1.0.0.0>
    [C:\WINDOWS\system32\THCI.DLL]  <Toshiba><1.0.0.0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 3816][C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe]  <TOSHIBA CORPORATION><2, 1, 0, 1>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 3864][C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe]  <adi><1, 0, 0, 18>
    [C:\Program Files\Analog Devices\SoundMAX\PMCPL.cpl]  <Analog Devices><1, 0, 0, 18>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 232][C:\Program Files\MessengerPlus! 3\MsgPlus.exe]  <Patchou><3, 54, 0, 132>
    [C:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\MessengerPlus! 3\MsgPlusLoader1.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 328][C:\Program Files\Apoint2K\Apntex.exe]  <Alps Electric Co., Ltd.><5.0.1.13>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\system32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.1.59>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 1340][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 1348][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.7.3>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  <Symantec Corporation><103.5.7.3>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\NISPROD.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\NISRES.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\NISTRAY.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\PROGRA~1\SYMANT~3\SYMANT~1\NISALERT.DLL]  <Symantec Corporation><8.6.2.152>
    [C:\WINDOWS\system32\SymNeti.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\WINDOWS\system32\SYMREDIR.DLL]  <Symantec Corporation><6.0.1.105>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccLogin.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\ccEmlflt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\NISLCOM.dll]  <Symantec Corporation><8.6.2.152>
    [C:\Program Files\Common Files\Symantec Shared\ccPxyEvt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymFWAgt.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavEmail.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\SFWAlert.dll]  <Symantec Corporation><8.6.2.152>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\ccFWSetg.dll]  <Symantec Corporation><103.5.7.3>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\pRSettg.dll]  <N/A><N/A>
    [C:\Program Files\Symantec Client Security\Symantec Client Firewall\TLevel.dll]  <Symantec Corporation><103.5.7.3>
[PID: 1368][C:\PROGRA~1\SYMANT~3\SYMANT~2\VPTray.exe]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.7.1.4>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliproxy.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\PROGRA~1\SYMANT~3\SYMANT~2\NAVNTUTL.DLL]  <Symantec Corporation><10.0.2.2020>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\WINDOWS\system32\nts.dll]  <LANDesk Software Ltd.><6.12.0.141 E>
    [C:\WINDOWS\system32\cba.dll]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <LANDesk Software Ltd.><6.12.0.140 E>
    [C:\WINDOWS\system32\PDS.DLL]  <LANDesk Software Ltd.><6.12.0.140 E>
[PID: 1052][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3510>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>

[PID: 976][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 1556][C:\Documents and Settings\xuely\Start Menu\Programs\Startup\FaxCtrl.exe]  <RightFAX, Inc.><7, 2, 0, 101>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\RightFAX\rfifax32.dll]  <RightFAX, Inc.><5.00>
[PID: 2556][C:\Program Files\zepsoft\Wallpaper Calendar\WallCal3.exe]  <Zepsoft><3.0.2.87>
    [C:\Program Files\zepsoft\Wallpaper Calendar\MHookWC.dll]  <Zepsoft><1.0.6.10>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2156][C:\WINDOWS\system32\cidaemon.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 3160][C:\WINDOWS\system32\cidaemon.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
[PID: 2800][C:\Documents and Settings\xuely\Application Data\Microsoft\Internet Explorer\Quick Launch\MyIE.exe]  <><2, 4, 1, 357>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\WINDOWS\Downloaded Program Files\urSuperHost.dll]  <F5 Networks><5400, 0, 41222, 1>
    [C:\WINDOWS\Downloaded Program Files\urxhost.dll]  <F5 Networks><5400, 0, 50316, 1>
    [C:\WINDOWS\Downloaded Program Files\urxhostres.dll]  <F5 Networks><2004, 8, 4, 1>
    [C:\WINDOWS\Downloaded Program Files\urxdialer.dll]  <F5 Networks><5400, 0, 50316, 1>
    [C:\WINDOWS\Downloaded Program Files\urxdialerres.dll]  <F5 Networks><2004, 6, 3, 1>
    [C:\WINDOWS\Downloaded Program Files\urTermProxy.dll]  <F5 Networks><5400, 0, 50412, 1>
    [C:\WINDOWS\Downloaded Program Files\utunres.dll]  <uRoam><2004, 6, 4, 1>
[PID: 2052][C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE]  <Microsoft Corporation><11.0.6353>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\vpmsece3.dll]  <Symantec Corporation><10.0.2.2020>
    [C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.7.1.4>
    [C:\WINDOWS\downlo~1\cnshook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
[PID: 3408][C:\Program Files\Messenger\msmsgs.exe]  <Microsoft Corporation><5.1.0639>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\System32\quartz.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\devenum.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Program Files\MessengerPlus! 3\MsgPlusH.dll]  <Patchou><3, 54, 0, 132>
    [C:\Program Files\MessengerPlus! 3\Resources\MsgPlusRes.dll]  <Patchou><3, 50, 2, 0>
[PID: 3924][C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE]  <Microsoft Corporation><11.0.6359>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF042E.DLL]  <Hewlett-Packard Company><4.27.4100.441>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF042G.DLL]  <Hewlett-Packard Company><4.27.4100.441>
[PID: 3956][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\DOWNLO~1\URXDIA~2.DLL]  <F5 Networks><5400, 0, 50316, 1>
    [C:\WINDOWS\DOWNLO~1\urxdialerres.dll]  <F5 Networks><2004, 6, 3, 1>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 1440][C:\Program Files\MSN Messenger\msnmsgr.exe]  <Microsoft Corporation><7.5.0324>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\MessengerPlus! 3\MsgPlusH.dll]  <Patchou><3, 54, 0, 132>
    [C:\Program Files\MessengerPlus! 3\Resources\MsgPlusRes.dll]  <Patchou><3, 50, 2, 0>
    [C:\Program Files\MessengerPlus! 3\RichEdHook.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\devenum.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Program Files\MessengerPlus! 3\libsndfile.dll]  <N/A><N/A>
    [C:\Program Files\MessengerPlus! 3\lame_enc.dll]  <N/A><N/A>
[PID: 1840][C:\Program Files\Google\Google Talk\googletalk.exe]  <Google><1,0,0,92>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\downlo~1\cnshook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
[PID: 3300][C:\WINDOWS\system32\mstsc.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\System32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
    [C:\WINDOWS\system32\tssoft32.acm]  <DSP GROUP, INC.><1.01>
    [C:\WINDOWS\system32\tsd32.dll]  <N/A><N/A>
[PID: 2728][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\downlo~1\CnsHint.dll]  <3721><1, 0, 0, 4>
    [C:\WINDOWS\downlo~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\WINDOWS\system32\crc33.dll]  <><1, 0, 0, 1>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 492][C:\Downloads\software\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\system32\MsgPlusLoader.dll]  <Patchou><3, 50, 2, 0>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>

谢谢大家帮忙

【回复“小小雪白”的帖子】
不好
一是你在别人的帖子上发帖，容易搞乱。
二是，你的日志不全，建议你粘全来。
你应该自己立个帖子，然后把日志完整的粘上来。

我的机子也是经常自动变成6781.com真是烦死了，不过我用兔子能改过来但是不定什么时候就又变成这个网站了！！！