PDA

View Full Version : CnsMin infection



sia812000
2006-12-10, 04:47
I ran the S&D and it found this threat CnsMin and it will remove 9 out of the 27 entries found and the rest can be deleted after a reboot. Hut Spybot dont seems to scan upon reboot. Further more all the 27 entries keep appearing each time I reboot. The infected files are found in c:\prog files\3721 folder
or in c:\windows\sownloaded prog files\
(some of these entries are classified as File or Registry key)

In my downloaded prog files I have these entries:
Java runtime
Msn Messenger Service
Shockwave Flash
Speed class
Symanec antivirus
Yahoo Audio

How can I get this infections as well as to set Spybot scan upon reboot?
Many thanks

Zenobia
2006-12-11, 08:56
You could try a Spybot scan in safe mode instead.It shows how to in the bottom half of this post:
http://forums.spybot.info/showpost.php?p=23629&postcount=2

But Spybot not being able to scan on a restart is a bit suspicious,so you might want to get checked out in malware removal.
The instructions are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22