Cris Min
-
(beep) this Cris Min virus.......I cant seem to clear it! Every time i delete it thru trend micro or ad aware, it comes back again!
And do you guys think i shld change my IE to firefox? But it will mean extra memory usage cos i cant delete IE away.And will it cause blocks or unable entry to certain website? -
Can't find anything on this virus leh....
Sure you spell it correctly?
What antivirus are you using?
Try giving a HijackThis log, see if I can find anything from there. -
shld be cns min.
-
http://www.trendmicro.com/vinfo/grayware/ve_GraywareDetails.asp?GNAME=ADW%5FCNSMIN%2EF
Is this the one u refering to? -
Open the Command prompt (Start -> Programs -> Accessories) and type:
cd "%WinDir%\Downloaded Program Files"
ren CnsMin.dll CnsDel.dll
Reboot and load the Command prompt again.
Type:
cd "%WinDir%\Downloaded Program Files"
del cns*.*
The first time you reboot after deleting or moving CnsMin you'll get an error about not being able to find it. Ignore this.
To clean up the remaining traces of the software that cause this, open the registry (Start -> Run -> regedit) and delete the following keys in red:
HKEY_CLASSES_ROOT\CLSID\{B83FC273-3522-4CC6-92EC-75CC86678DA4}
HKEY_CLASSES_ROOT\CLSID\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}
HKEY_CLASSES_ROOT\CnsHelper.CH
HKEY_CLASSES_ROOT\CnsHelper.CH.1
HKEY_CLASSES_ROOT\CnsMinHK.CnsHook
HKEY_CLASSES_ROOT\CnsMinHK.CnsHook.1
HKEY_CURRENT_USER\Software\3721
HKEY_LOCAL_MACHINE\Software\3721
HKEY_LOCAL_MACHINE\Software\InterChina
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AdvancedOptions\!CNS
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{5D73EE86-05F1-49ed-B850-E423120EC338}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{FD00D911-7529-4084-9946-A29F1BDF4FE5}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\CnsMin
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin
Fix continue in next post. -
Go to Start > Search
Click All files and folders.
Under Look in, select Local hard drives.
Click on More advanced options. Tick these boxes:
Search system folders
Search hidden files and folders
Search subfolders
Find all these files one by one and delete them. If you can't delete, delete them in Safe Mode.
ierepairer.exe
cns.exe
assist4.exe
capp.exe
378.tmp.exe
sremove.exe
For those entries below, go straight to the directory, which is C:\Program Files.
C:\Program Files\3721\assist\assistantwzd.exe
C:\Program Files\3721\assistse.exe
C:\Program Files\3721\setup.exe
To see all these files, open up My Computer. Go to Tools > Folder options. Click on View tab. Under Hidden files and folders, select Show hidden files and folders. Apply the settings. Close My Computer. Open it again to delete the above files.
Fix continue in next post. -
Find and delete these files if they are present.
C:\Windows\downlo~1\cnsio.dll
C:\Windows\downlo~1\cnshook.dll
C:\Windows\downlo~1\axfilter.dll
C:\Windows\downlo~1\3721\cnsio.dll
C:\Winodws\system32\ehelper.dll
C:\Winodws\system32\cnshook.dll
C:\Winodws\system32\cesweb.dll
C:\Winodws\system32\bdhelper.dll
C:\Winodws\system32\assist.dll
C:\Program Files\3721\shell\menuinfo.dll
C:\Program Files\3721\shell\ieangel.dll
C:\Program Files\3721\shell\assecblk.dll
C:\Program Files\3721\shell\asmenu.dll
C:\Program Files\3721\scrblock.dll
C:\Program Files\3721\patch06.dll
C:\Program Files\3721\patch05.dll
C:\Program Files\3721\patch03.dll
C:\Program Files\3721\notifier.dll
C:\Program Files\3721\helper.dll
C:\Program Files\3721\ces\cmail.dll
C:\Program Files\3721\ces\cesweb.dll
C:\Program Files\3721\ces\cespack.dll
C:\Program Files\3721\ces\cesout10.dll
C:\Program Files\3721\ces\cesout.dll
C:\Program Files\3721\ces\cesmain.dll
C:\Program Files\3721\ces\cesfox.dll
C:\Program Files\3721\ces\cescache.dll
C:\Program Files\3721\ces\abmain.dll
C:\Program Files\3721\autolive.dll
C:\Program Files\3721\assist\yalive.dll
C:\Program Files\3721\assist\xpstyle.dll
C:\Program Files\3721\assist\repair.dll
C:\Program Files\3721\assist\optimum.dll
C:\Program Files\3721\assist\eheocx.dll
C:\Program Files\3721\assist\eheflash.dll
C:\Program Files\3721\assist\assistex.dll
C:\Program Files\3721\assist\assist.dll
C:\Program Files\3721\assist\assisres.dll
C:\Program Files\3721\assist\adwreg.dll
C:\Program Files\3721\assist\adfilter.dll
C:\Program Files\3721\alrex.dll
C:\Program Files\3721\3721\scrblock.dll
C:\Program Files\3721\3721\helper.dll
C:\Program Files\3721\3721\autolive.dll
C:\Windows\downloaded program files\3721\cmail.dll
C:\Windows\downloaded program files\3721\cesweb.dll
C:\Windows\downloaded program files\3721\cesout10.dll
C:\Windows\downloaded program files\3721\cesout.dll
C:\Windows\downloaded program files\3721\cesmain.dll
C:\Windows\downloaded program files\3721\cesfox.dll
C:\Windows\downloaded program files\3721\cescache.dll
C:\Windows\downloaded program files\3721\autolive.dll
C:\Windows\downloaded program files\3721\abmain.dll
C:\Windows\downlo~1\cnsminsv.dll
C:\Windows\downlo~1\cnsminio.dll
C:\Windows\downlo~1\cnsminex.dll
C:\Windows\downlo~1\cnsmindt.dll
C:\Windows\downlo~1\cnsmin.dll
C:\Windows\downlo~1\cnsminck.dll
C:\Windows\downloaded program files\cnsminio.dll
C:\Windows\downloaded program files\cnsmindt.dll
C:\Windows\downloaded program files\cnsminck.dll
C:\Windows\downloaded program files\cnshook.dll
C:\Windows\downloaded program files\3721\cnsio.dll
C:\Windows\downloaded program files\axfilter.dll
C:\Windows\system\cnshook.dll
C:\Windows\system\cesweb.dll
C:\Windows\system\bdhelper.dll
C:\Windows\system\assist.dll
Go to Start > Search and find these files. Delete if they are present. If you can't delete, delete them in Safe Mode.
regkper.dll
cns.dll
helper1.dll
patch10.dll -
thanks alot!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
spending 1hr to delete the files. -
To double check, just do a re-scan with Ad-Aware and Spybot S&D.
