3楼的高手，日志已上传了，帖子里也有.TXT的日志，请帮忙诊断，谢谢！

先按15楼的做法试了一下，目前还没有找到客户端卸载程序，专杀工具找到一个灰鸽子病毒，能清除，不知道重起后能不能再找到，试一下以后再按14楼的方法做，先谢谢两位。

先按15楼的做法试了一下，目前还没有找到客户端卸载程序，专杀工具找到一个灰鸽子病毒，能清除，不知道重起后能不能再找到，试一下以后再按14楼的方法做，先谢谢两位。

按14楼的做法搞定，呵呵，非常感谢，但还有公司的一台笔记本电脑也中了同样的病毒，把日志发来，请再帮忙看一下，非常感谢！

[CODE]

2007-07-18,23:38:43

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><ctfmon.exe>  [Microsoft Corporation]
    <swg><C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe>  [(Verified)Google Inc]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Windows 2000 Publisher]
    <ATIModeChange><Ati2mdxx.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <AtiPTA><C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe>  [ATI Technologies, Inc.]
    <DadApp><C:\Program Files\Dell\AccessDirect\dadapp.exe>  []
    <PCTVOICE><pctspk.exe>  []
    <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <MULTIMEDIA KEYBOARD><C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe>  [Netropa Corp.]
    <PRPCMonitor><PRPCUI.exe>  [Intel Corporation]
    <IgfxTray><C:\WINNT\system32\igfxtray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <HotKeysCmds><C:\WINNT\system32\hkcmd.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <Net_Drives><C:\Program Files\Cisco Systems\VPN Client\UTC_Profiles\Net_Drives.exe shell>  [N/A]
    <Realtime Monitor><C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s>  [Computer Associates International, Inc.]
    <Sxplog><C:\SYSMGT\SxpInst\sxpstub.exe>  [Computer Associates International, Inc.]
    <SDJobCheck><triggusr.exe>  [N/A]
    <qcsszjcz><c:\chenhu2\chenqxms.exe>  [陈虎]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows 2000 Publisher]
    <Userinit><C:\WINNT\system32\userinit.exe>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <GinaDLL><CSGina.dll>  [(Verified)"Cisco Systems, Inc."]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Windows Media Player><C:\WINNT\System32\setup\wmpocm.exe /ShowWMP>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer Access><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigIE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express Access><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigOE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\wmp.inf,PerUserStub>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\WINNT\system32\Rundll32.exe C:\WINNT\system32\mscories.dll,Install>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
    <CRLUpdate><%SystemRoot%\System32\updcrl.exe -e -u %SystemRoot%\System32\verisignpub1.crl>  [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINNT\System32\logon.scr>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <DAEMON Tools-2052><; "C:\Program Files\D-Tools\daemon.exe"  -lang 1033>  [DAEMON'S HOME]

==================================
启动文件夹
N/A

==================================
服务
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  <C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Ati HotKey Poller / Ati HotKey Poller][Stopped/Auto Start]
  <C:\WINNT\system32\Ati2evxx.exe><>
[CA-License Client / CA_LIC_CLNT][Stopped/Manual Start]
  <C:\WINNT\Lic98Rmt.exe><N/A>
[CA-License Server / CA_LIC_SRVR][Stopped/Manual Start]
  <C:\WINNT\Lic98RmtD.exe><N/A>
[Cisco Systems, Inc. VPN Service / CVPND][Running/Auto Start]
  <c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe><Cisco Systems, Inc.>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Google Updater Service / gusvc][Stopped/Manual Start]
  <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[eTrust Antivirus RPC Server / InoRPC][Running/Auto Start]
  <"C:\Program Files\CA\eTrust Antivirus\InoRpc.exe"><Computer Associates International, Inc.>
[eTrust Antivirus Realtime Server / InoRT][Running/Auto Start]
  <"C:\Program Files\CA\eTrust Antivirus\InoRT.exe"><Computer Associates International, Inc.>
[eTrust Antivirus Job Server / InoTask][Running/Auto Start]
  <"C:\Program Files\CA\eTrust Antivirus\InoTask.exe"><Computer Associates International, Inc.>
[Event Log Watch / LogWatch][Running/Auto Start]
  <C:\WINNT\LogWatNT.exe><N/A>
[Netropa NHK Server / nhksrv][Running/Auto Start]
  <C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe><N/A>
[Unicenter Software Delivery / SDService][Running/Auto Start]
  <"C:\SYSMGT\TNGSD\BIN\SDSERV.EXE"><Computer Associates International, Inc.>
[WMDM PMSP Service / WMDM PMSP Service][Running/Auto Start]
  <C:\WINNT\System32\mspmspsv.exe><Microsoft Corporation>
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation>

==================================
驱动程序
[acpidisk / acpidisk][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\acpidisk.sys><N/A>
[aic78xx / aic78xx][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\aic78xx.sys><Microsoft Corporation>
[ati2mtag / ati2mtag][Stopped/Manual Start]
  <System32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[Broadcom 570x Gigabit Integrated Controller / b57w2k][Running/Manual Start]
  <system32\DRIVERS\b57w2k.sys><Broadcom Corporation>
[Cirrus WDM Audio Codec Driver / cs429x][Stopped/Manual Start]
  <system32\drivers\cwawdm.sys><Cirrus Logic, Inc.>
[Cisco Systems VPN Adapter / CVirtA][Stopped/Manual Start]
  <system32\DRIVERS\CVirtA.sys><Cisco Systems, Inc.>
[Cisco Systems Inc. IPSec Driver / CVPNDRVA][Running/Auto Start]
  <\??\c:\WINNT\system32\Drivers\CVPNDRVA.sys><Cisco Systems, Inc.>
[d346bus / d346bus][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\d346bus.sys><>
[d346prt / d346prt][Running/Boot Start]
  <\SystemRoot\System32\Drivers\d346prt.sys><>
[TI UltraMedia CardBus Controller Filter Driver / DevUpper][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\tiumflt.sys><Texas Instruments Inc.>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Stopped/Disabled]
  <System32\drivers\dmload.sys><VERITAS Software Corp.>
[Deterministic Network Enhancer Miniport / DNE][Running/Manual Start]
  <system32\DRIVERS\dne2000.sys><Deterministic Networks, Inc.>
[3Com EtherLink XL B/C Adapter Driver / EL90BC][Stopped/Manual Start]
  <System32\DRIVERS\el90xbc5.sys><3Com Corporation>
[3Com 3C90X-BC Family PCI EtherLink Adapter / EL90Xbc][Stopped/Manual Start]
  <System32\DRIVERS\el90Xbc5.SYS><3Com Corporation>
[GTICARD / GTICARD][Running/Manual Start]
  <system32\DRIVERS\gticard.sys><Texas Instruments>
[HSFHWICH / HSFHWICH][Running/Manual Start]
  <system32\DRIVERS\HSFHWICH.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
  <system32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[ialm / ialm][Running/Manual Start]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[INO_FLPY / INO_FLPY][Running/Boot Start]
  <\SystemRoot\system32\Drivers\ino_flpy.sys><Computer Associates>
[INO_FLTR / INO_FLTR][Running/Auto Start]
  <\??\C:\WINNT\system32\Drivers\ino_fltr.sys><Computer Associates>
[AEGIS Protocol (IEEE 802.1x) v1.4.0.13 / MDC8021X][Running/Auto Start]
  <system32\DRIVERS\mdc8021x.sys><Meetinghouse Data Communications>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[Multimedia Keyboard Filter Driver / msikbd2k][Running/System Start]
  <System32\DRIVERS\msikbd2k.sys><Netropa Corporation>
[mxdispdr / mxdispdr][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\mxdispdr.sys><N/A>
[O2Micro SmartCardBus Reader / O2SCBUS][Stopped/Manual Start]
  <system32\DRIVERS\ozscr.sys><O2Micro>
[OMCI WDM Device Driver / omci][Running/System Start]
  <System32\DRIVERS\omci.sys><Dell Computer Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[W2K Pctel Serial Device Driver / Ptserial][Stopped/Manual Start]
  <System32\DRIVERS\ptserial.sys><PCTEL, INC.>
[Level II Serial port driver / Serial][Running/System Start]
  <system32\DRIVERS\LEVELII.SYS><CARRIER>
[SMC IrCC Miniport Device Driver / SMCIRDA][Running/Manual Start]
  <System32\DRIVERS\smcirda.sys><SMC>
[Audio Driver (WDM) - SigmaTel CODEC / STAC97][Running/Manual Start]
  <system32\drivers\STAC97.sys><SigmaTel, Inc.>
[StreamDispatcher / StreamDispatcher][Running/Auto Start]
  <system32\DRIVERS\strmdisp.sys><Conexant Systems, Inc.>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
  <System32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[tiumfwl / tiumfwl][Running/Manual Start]
  <system32\drivers\tiumfwl.sys><Texas Instruments Inc.>
[W2k Vmodem / Vmodem][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\vmodem.sys><PCTEL, INC.>
[W2k Vpctcom / Vpctcom][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\vpctcom.sys><PCtel, Inc.>
[vsdatant / vsdatant][Stopped/Manual Start]
  <\??\C:\WINNT\system32\vsdatant.sys><Zone Labs Inc.>
[W2k Vvoice / Vvoice][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\vvoice.sys><PCtel, Inc.>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}][Stopped/Manual Start]
  <system32\drivers\ialmsbw.sys><Intel Corporation>
[Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}][Stopped/Manual Start]
  <system32\drivers\ialmkchw.sys><Intel Corporation>
[AIM 3.0 Part 01 Codec Driver CH-7009-A/CH-7011 / {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55}][Stopped/Manual Start]
  <system32\drivers\wA301a.sys><Intel Corporation>
[AIM 3.0 Part 01 Codec Driver CH-7009-B / {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55}][Stopped/Manual Start]
  <system32\drivers\wA301b.sys><Intel Corporation>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[CAdLogic Object]
  {11F09AFD-75AD-4E51-AB43-E09E9351CE16} <C:\Program Files\Common Files\CPUSH\cpush.dll, >
[Info cache]
  {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <D:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[AcroIEToolbarHelper Class]
  {AE7CD045-E861-484f-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[Adobe PDF]
  {47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 180][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 204][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 200][\??\C:\WINNT\system32\winlogon.exe]  [N/A, ]
    [C:\WINNT\system32\CSGina.dll]  [N/A, ]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\winlib .dll]  [N/A, ]
    [C:\WINNT\system32\msplrct.dll]  [N/A, ]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\msacm32.drv]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3889]
[PID: 252][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2191.1.296.2]
[PID: 264][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2184.1]
[PID: 392][C:\WINNT\System32\SCardSvr.exe]  [Microsoft Corporation, 5.00.2195.6609]
[PID: 464][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 524][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\unimdm.tsp]  [Microsoft Corporation, 5.00.2175.1]
    [C:\WINNT\System32\kmddsp.tsp]  [Microsoft Corporation, 5.00.2150.1]
    [C:\WINNT\System32\ndptsp.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\ipconf.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\h323.tsp]  [Microsoft Corporation, 5.00.2143.1]
[PID: 584][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\AdobePDF.dll]  [Adobe Systems Incorporated., 6.0.000]
    [C:\Program Files\Adobe\Acrobat 6.0\Distillr\adistres.dll]  [Adobe Systems Incorporated., 6.0.0.2003040700]
[PID: 620][C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe]  [N/A, ]
[PID: 676][c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe]  [Cisco Systems, Inc., 4.0.2 (D)]
    [C:\WINNT\system32\vsdata.dll]  [Zone Labs Inc., 3.7.078.001]
[PID: 724][C:\Program Files\CA\eTrust Antivirus\InoRpc.exe]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InConfig.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InoOEM.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\INOCORE.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\DistCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\ScanLog.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InocDB.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\wBkRsrc.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\secAddIn.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InocAdn.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InDrvCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\secAPI.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\InoScan.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\ScanRes.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\poldecod.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\polAdn.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\RPCMtAdn.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\NameAPIX.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\RPCMtAPI.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InoAlert.dll]  [Computer Associates International, Inc., 7.1.192.0]
[PID: 792][C:\Program Files\CA\eTrust Antivirus\InoRT.exe]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\ScanLog.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InConfig.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InoOEM.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\INOCORE.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InocDB.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\DistCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\wBkRsrc.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\InoScan.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\ScanRes.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\arclib.dll]  [Computer Associates International, Inc., 7.2.0.18]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\VetE.dll]  [CA, Inc., Version 30.8.0.0]

[PID: 808][C:\Program Files\CA\eTrust Antivirus\InoTask.exe]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InoAlert.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\ScanLog.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InConfig.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InoOEM.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\INOCORE.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InocDB.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\RPCMtAPI.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\InDrvCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\DistCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\secAPI.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\CA\eTrust Antivirus\wBkRsrc.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\InoScan.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\ScanRes.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\arclib.dll]  [Computer Associates International, Inc., 7.2.0.18]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\Avh32dll.dll]  [CA, Inc., Version 30.8.0.0]
[PID: 884][C:\WINNT\LogWatNT.exe]  [N/A, ]
    [C:\CA_LIC\lic98.dll]  [Computer Associates, 01.46]
[PID: 940][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 960][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2137.1]
[PID: 996][C:\SYSMGT\TNGSD\BIN\SDSERV.EXE]  [Computer Associates International, Inc., 4, 0, 2102, 0]
[PID: 1064][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 1144][C:\WINNT\System32\mspmspsv.exe]  [Microsoft Corporation, 7.10.00.3068]
[PID: 1156][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\msxml3.dll]  [Microsoft Corporation, 8.70.1113.0]
[PID: 1204][C:\SYSMGT\TNGSD\BIN\TRIGGAG.EXE]  [Computer Associates International, Inc., 4, 0, 2107, 0]
    [C:\SYSMGT\TNGSD\BIN\ACPORT32.dll]  [Computer Associates International, Inc., 4, 0, 2106, 0]
    [C:\SYSMGT\TNGSD\BIN\RDCNF.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDStrCnv.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDCAWIN.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDWINAPI.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\CTRLCOM.dll]  [Computer Associates International, Inc., 4, 0, 2107, 0]
    [C:\SYSMGT\TNGSD\BIN\SDWCHAR.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDNLS.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDOSAPI.dll]  [Computer Associates, 1, 0, 0, 1]
    [C:\SYSMGT\TNGSD\BIN\ASMCOM32.dll]  [Computer Associates International, Inc., 4, 0, 2106, 0]
    [C:\SYSMGT\TNGSD\BIN\NATFCL32.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDLIC.dll]  [Computer Associates International, Inc., 4, 0, 2107, 0]
    [C:\SYSMGT\TNGSD\BIN\SDRES.dll]  [Computer Associates International, Inc., 4, 0, 2901, 0]
    [C:\SYSMGT\TNGSD\BIN\GENERAL.dll]  [Computer Associates International, Inc., 4, 0, 2106, 0]
    [C:\SYSMGT\TNGSD\BIN\COMPON.dll]  [Computer Associates International, Inc., 4, 0, 2107, 0]
    [C:\SYSMGT\TNGSD\BIN\sdevent.dll]  [Computer Associates International, Inc., 4, 0, 2106, 0]
    [C:\SYSMGT\TNGSD\BIN\SDINFOV.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDFILSYS.dll]  [Computer Associates International, Inc., 4, 0, 2107, 0]
    [C:\SYSMGT\TNGSD\BIN\FILECOPY.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\TRIGGAPI.dll]  [Computer Associates International, Inc., 4, 0, 2107, 0]
[PID: 1116][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\AppPatch\AcLayers.DLL]  [Microsoft Corporation, 5.00.2195.6717]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\msacm32.drv]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\PROGRA~1\Dell\ACCESS~1\Dadkeyb.dll]  [N/A, ]
    [C:\WINNT\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\Program Files\Internet Explorer\mui\0804\browselc.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
    [C:\WINNT\system32\msadp32.acm]  [Microsoft Corporation, 5.00.2134.1]
    [C:\Program Files\Internet Explorer\mui\0804\shdoclc.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINNT\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.0.2003040700]
    [C:\WINNT\system32\msimtf.dll]  [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll]  [Autodesk, 16.0.0.86]
    [C:\PROGRA~1\WINZIP\WZSHLSTB.DLL]  [WinZip Computing, Inc., 3.0 (32-bit)]
    [C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL]  [Microsoft Corporation, 11.0.5510.0]
    [C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\pkmws.dll]  [Microsoft Corporation, 11.0.5510.0]
    [C:\Program Files\Common Files\Microsoft Shared\Web Folders\2052\nsextint.dll]  [, ]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\CA\eTrust Antivirus\InoShell.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\Program Files\Adobe\Acrobat 6.0\Acrobat Elements\ContextMenu.dll]  [Adobe Systems Inc., 1.0.0.2003040700]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]

[PID: 1412][C:\Program Files\Dell\AccessDirect\dadapp.exe]  [N/A, ]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\PROGRA~1\Dell\ACCESS~1\Dadkeyb.dll]  [N/A, ]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1448][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1452][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\SynTPAPI.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1468][C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe]  [Netropa Corp., 1.00]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\msiosd32.dll]  [N/A, ]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1480][C:\WINNT\system32\PRPCUI.exe]  [Intel Corporation, 3.0.0.0]
    [C:\WINNT\system32\PRPCUI.dll]  [Intel Corporation, 3.0.0.0]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\PRPCLANG.DLL]  [Intel Corp., 2.0.0.0]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1524][C:\Program Files\Netropa\Multimedia Keyboard\mmusbkb2.exe]  [Netropa Corporation, 1.70]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1532][C:\WINNT\system32\hkcmd.exe]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3889]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\igfxhk.dll]  [Intel Corporation, 3.0.0.3889]
[PID: 1576][C:\Program Files\Netropa\Onscreen Display\OSD.exe]  [Netropa Corp., 2.01]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1596][C:\PROGRA~1\CA\ETRUST~1\realmon.exe]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\PROGRA~1\CA\ETRUST~1\InConfig.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\PROGRA~1\CA\ETRUST~1\InoOEM.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\PROGRA~1\CA\ETRUST~1\INOCORE.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\PROGRA~1\CA\ETRUST~1\InDrvCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\SYSMGT\CA_APPSW\VIRUSSCAN\DistCfg.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\PROGRA~1\CA\ETRUST~1\secAPI.dll]  [Computer Associates International, Inc., 7.1.192.0]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\CA_LIC\lic98.dll]  [Computer Associates, 01.46]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1620][C:\chenhu2\chenqxms.exe]  [陈虎, 1.000]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\PROGRA~1\COMMON~1\MICROS~1\Speech\sapi.dll]  [Microsoft Corporation, 5.1.4324.00  built by: lab06_n(spgbld)]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
[PID: 1608][C:\SYSMGT\SxpInst\sxplog32.exe]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\SXPFILEC.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\Program Files\CA\DCS\CAWIN\CAWINEXF.dll]  [Computer Associates International, Inc., 1.20.18]
    [C:\SYSMGT\SxpInst\ccsTrc32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\TNGSD\BIN\SDStrCnv.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\TNGSD\BIN\SDCAWIN.dll]  [Computer Associates International, Inc., 4, 0, 2102, 0]
    [C:\SYSMGT\SxpInst\CCSINI32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\CCSLCK32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\CCSTOO32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\SXPAAF32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\SXP2MSI.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\SxpInst\CCSCMP32.dll]  [Computer Associates International, Inc., 6.4/67]
    [C:\SYSMGT\TNGSD\SD\NLS\sxplog32.ENU]  [Computer Associates International, Inc., 6.4/56]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
[PID: 1548][C:\WINNT\system32\ctfmon.exe]  [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\MSUTB.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\mui\fallback\0804\msutb.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1636][C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe]  [Google Inc., 1, 2, 1128, 5462]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\res_en.dll]  [Google Inc., 1, 2, 1128, 5462]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\swg.dll]  [Google Inc., 1, 2, 1128, 5462]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]

[PID: 1424][C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE]  [Microsoft Corporation, 9.0.6604]
    [C:\Program Files\Microsoft Office\Office\OUTLLIB.dll]  [Microsoft Corporation, 9.0.6627]
    [C:\Program Files\Microsoft Office\Office\MSO9.DLL]  [Microsoft Corporation, 9.0.7616]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\Program Files\Microsoft Office\Office\2052\outllibr.dll]  [Microsoft Corporation, 9.0.3821]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\msmapi32.dll]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\GAPI32.dll]  [Microsoft Corporation, 5.5.2803.0]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSABP32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSUI32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\OUTEX.dll]  [Microsoft Corporation, 8.30.3122.0]
    [C:\Program Files\Microsoft Office\Office\OUTLRPC.dll]  [Microsoft Corporation, 9.0.3519]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\mspst32.dll]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSMDB32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Adobe\Acrobat 6.0\PDFMaker\Mail\Outlook\PDFMOutlook.dll]  [Adobe Systems Incorporated, 6.0.0.0]
    [C:\Program Files\Microsoft Office\Office\2052\fldpub.dll]  [Microsoft Corporation, 9.0]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
    [C:\Program Files\Common Files\System\MAPI\2052\NT\ExSec32.dll]  [Microsoft Corporation, 5.5.3124.0]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\Program Files\Microsoft Office\Office\RTFHTML.dll]  [Microsoft Corporation, 9.0.6418]
    [C:\WINNT\system32\msimtf.dll]  [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
    [C:\PROGRA~1\Adobe\ACROBA~1.0\PDFMaker\Common\ADOBEP~1.DLL]  [, ]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\PROGRA~1\Dell\ACCESS~1\Dadkeyb.dll]  [N/A, ]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  [Hewlett-Packard Company, 4.14.0.13]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\mapi32.dll]  [Microsoft Corporation, 1.0.2518.0]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\Program Files\Internet Explorer\mui\0804\shdoclc.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\Program Files\Microsoft Office\Office\OUTLCTL.DLL]  [Microsoft Corporation, 9.0.2323]
[PID: 1752][C:\Program Files\Common Files\System\MAPI\2052\nt\MAPISP32.EXE]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\msmapi32.dll]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\GAPI32.dll]  [Microsoft Corporation, 5.5.2803.0]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSABP32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSUI32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\OUTEX.dll]  [Microsoft Corporation, 8.30.3122.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\EMSMDB32.DLL]  [Microsoft Corporation, 5.5.3121.0]
    [C:\Program Files\Common Files\System\MAPI\2052\nt\mspst32.dll]  [Microsoft Corporation, 5.5.3121.0]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
[PID: 596][C:\DZH5\internet\hypwise.exe]  [N/A, ]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\DZH5\internet\olepro32.dll]  [Microsoft Corporation, 5.0.4275]
[PID: 1884][C:\Program Files\Microsoft Office\Office\EXCEL.EXE]  [Microsoft Corporation, 9.0.8216]
    [C:\Program Files\Microsoft Office\Office\MSO9.DLL]  [Microsoft Corporation, 9.0.7616]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
    [C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL]  [Microsoft Corporation, 6.04.9969]
    [C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA6\2052\VBE6INTL.DLL]  [Microsoft Corporation, 6.03.9070]
    [C:\WINNT\system32\FM20.DLL]  [Microsoft Corporation, 11.0.5601]
    [C:\PROGRA~1\Adobe\ACROBA~1.0\PDFMaker\Common\ADOBEP~1.DLL]  [, ]
    [C:\PROGRA~1\Dell\ACCESS~1\Dadkeyb.dll]  [N/A, ]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  [Hewlett-Packard Company, 4.14.0.13]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\HPBF252G.DLL]  [Hewlett-Packard Company, 4.14.0.13]
[PID: 1896][C:\Program Files\Microsoft Office\Office\WINWORD.EXE]  [Microsoft Corporation, 9.0.8216]
    [C:\Program Files\Microsoft Office\Office\MSO9.DLL]  [Microsoft Corporation, 9.0.7616]
    [C:\WINNT\system32\MSCTF.dll]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\SynTPFcs.dll]  [Synaptics, Inc., 6.7.4 01Aug02]
    [C:\WINNT\mui\fallback\0804\msctf.dll.mui]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL]  [Microsoft Corporation, 6.04.9969]
    [C:\PROGRA~1\COMMON~1\MICROS~1\VBA\VBA6\2052\VBE6INTL.DLL]  [Microsoft Corporation, 6.03.9070]
    [C:\PROGRA~1\Adobe\ACROBA~1.0\PDFMaker\Common\ADOBEP~1.DLL]  [, ]
    [C:\Program Files\Common Files\Microsoft Shared\Proof\MSSPELL3.DLL]  [Microsoft Corporation, 1.1.6215]
    [C:\chenhu2\cqxms.dll]  [N/A, ]
    [C:\Program Files\Common Files\Microsoft Shared\Proof\2052\MSGR2SC.DLL]  [Microsoft Corporation, 1.0]
    [C:\Program Files\Common Files\Microsoft Shared\Proof\2052\MSGR2EN.DLL]  [Microsoft Corporation, 2.0]
    [C:\Program Files\Common Files\Microsoft Shared\Proof\wdbrkchs.dll]  [Microsoft Corporation, 1.0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  [Hewlett-Packard Company, 4.14.0.13]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\HPBF252G.DLL]  [Hewlett-Packard Company, 4.14.0.13]
    [C:\PROGRA~1\Dell\ACCESS~1\Dadkeyb.dll]  [N/A, ]
    [C:\WINNT\system32\CHENHU4.IME]  [chenhu, 5.8]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]