现代都市自由街区:C:\WINDOWS\DPOWNLO~1\CNSMIN.LL

在开始\运行 输入“msconfig”,进入硬件实时配置程序，将启动选项下对应的文件禁止，然后重启。

导出的文本是

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-11-25 unins000.exe (51.41.0.0)
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2005-11-18 Includes\Cookies.sbi
2005-11-18 Includes\Dialer.sbi
2005-11-18 Includes\Hijackers.sbi
2005-11-18 Includes\Keyloggers.sbi
2005-11-18 Includes\Malware.sbi
2005-11-18 Includes\Revision.sbi
2005-11-18 Includes\Security.sbi
2005-11-18 Includes\Spybots.sbi
2005-11-18 Includes\Trojans.sbi
2005-02-17 Includes\Tracks.uti
2005-11-18 Includes\PUPS.sbi

Located: HK_LM:Run, CnsMin
command: Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32
file: C:\WINDOWS\system32\Rundll32.exe
size: 32768
MD5: e8693ac92967c1e51a8d038a80a72b21

Located: HK_LM:Run, IMJPMIG8.1 (DISABLED)
command: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
file: C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
size: 208952
MD5: 7bbe4cf421aecc7f0226edd75f12079f

Located: HK_LM:Run, IS CfgWiz (DISABLED)
command: C:\Program Files\Norton Personal Firewall\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
file:

Located: HK_LM:Run, MINI_BFYY (DISABLED)
command: C:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe
file: C:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe
size: 741376
MD5: 6ecd12d4fc90bb87cd03595cc4936009

Located: HK_LM:Run, PHIME2002A (DISABLED)
command: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
file: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
size: 455168
MD5: 024dc0f68df5fd6ae9dd82dfbaf479d6

Located: HK_LM:Run, PHIME2002ASync (DISABLED)
command: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
file: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
size: 455168
MD5: 024dc0f68df5fd6ae9dd82dfbaf479d6

Located: HK_LM:Run, RavMon (DISABLED)
command: C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
file: C:\PROGRA~1\RISING\RAV\RAVMON.EXE
size: 479232
MD5: bd5f50d2d1fbad8fb5e05a09b799ccb7

Located: HK_LM:Run, RavTimer (DISABLED)
command: C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
file: C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
size: 126976
MD5: 6735d9019f5c85aa1cefd04facf664a9

Located: HK_LM:Run, SKYNET Personal FireWall (DISABLED)
command: C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
file: C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
size: 3133952
MD5: 54b7d5cedf097c97e6afaa79d8a465f5

Located: HK_LM:Run, SoundMan (DISABLED)
command: SOUNDMAN.EXE
file: C:\WINDOWS\SOUNDMAN.EXE
size: 54784
MD5: ce5fcb3aa0299b051eba0cce41a41827

Located: HK_LM:Run, StormCodec_Helper (DISABLED)
command: "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
file: C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe
size: 96159
MD5: 8457134ea97c4c966a3da696382ddb43

Located: HK_LM:Run, Thunder (DISABLED)
command: "D:\Program Flimes\Thunder Network\Thunder\ThunderShell.exe" /s
file: D:\Program Flimes\Thunder Network\Thunder\ThunderShell.exe
size: 566272
MD5: 357494dfad664f8cdd9f2423e31a241c

Located: HK_LM:Run, TkBellExe (DISABLED)
command: "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
file: C:\Program Files\Common Files\Real\Update_OB\realsched.exe
size: 180269
MD5: b8e684df9a97497edd2f87444a6307fb

Located: HK_LM:Run, yassistse (DISABLED)
command: "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
file:

Located: HK_CU:Run, ctfmon.exe (DISABLED)
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 3b969fc320cbaed40b2441d6714dcc5c

Located: WinLogon, AtiExtEvent (DISABLED)
command: Ati2evxx.dll
file: Ati2evxx.dll

Located: WinLogon, crypt32chain (DISABLED)
command: crypt32.dll
file: crypt32.dll

Located: WinLogon, cryptnet (DISABLED)
command: cryptnet.dll
file: cryptnet.dll

Located: WinLogon, cscdll (DISABLED)
command: cscdll.dll
file: cscdll.dll

Located: WinLogon, ScCertProp (DISABLED)
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, Schedule (DISABLED)
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, sclgntfy (DISABLED)
command: sclgntfy.dll
file: sclgntfy.dll

Located: WinLogon, SensLogn (DISABLED)
command: WlNotify.dll
file: WlNotify.dll

Located: WinLogon, termsrv (DISABLED)
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, wlballoon (DISABLED)
command: wlnotify.dll
file: wlnotify.dll

只要一见“CnsMin.ll,Rundll32”，不用说就是3721这垃圾了。

网上有专门的3721卸载工具。

最简单有效的方法

这是3721出错造成的，3721将程序写入了系统驱动，所以出现问题很难通过卸载解决，我遇到3次你这样的问题，每次的想法都是如何卸载或禁用，却都不能成功，有天晚上我突然想到即然是3721出错造成的为什么不进行逆向思维，重新安装3721呢？第二天上3721网站下载“网络实名开启及修复工具”安装后果然问题解决了。
其实大家都对3721没什么好印象，都不喜欢3721，但问题出现了总要解决啊。
最后再按正常方式把3721卸载掉就好了。
http://www.3721.com
声明：本人严重bs 3721的一切形为！