Results 1 to 3 of 3

Thread: Help with CnsMin

  1. #1
    Junior Member
    Join Date
    Oct 2006
    Posts
    1

    Default Help with CnsMin

    Dear all,

    I am new here. Please kindly help : Spybot found that I am infected with cnsmin. I searched the posts here and found some experts suggested using ewido and I've installed the software and tried running it under save mode. But ewido says it cannot remove the cnsmin. Moreover, since the screen display is 640x480 under save mode and ewido uses higher resolution, I can barely quit with ctrl-alt-del.

    I am posting my ewido report below and anybody please kindly help:

    Best regards and many thanks,
    Eric

    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 上午 02:30:41 2006/10/6

    + Scan result:



    HKLM\SOFTWARE\Classes\CLSID\{CE439C63-384A-747A-A357-23D96B5D652B} -> Adware.ALiBaBar : Ignored.
    HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE439C63-384A-747A-A357-23D96B5D652B} -> Adware.ALiBaBar : Ignored.
    HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE439C63-384A-747A-A357-23D96B5D652B} -> Adware.ALiBaBar : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE439C63-384A-747A-A357-23D96B5D652B} -> Adware.ALiBaBar : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\654FQLK1\scrblkup[1].cab/ScrBlock.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\654FQLK1\yaswiper[1].cab/yaswiper.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\654FQLK1\yieacore3[1].cab/yieacore.dll/cdnaux.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OL6VMZ8P\scrblkup[1].cab/ScrBlock.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OL6VMZ8P\yieacore3[1].cab/yieacore.dll/cdnaux.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OZUF21YH\keepmainM[1].cab/cns1.exe -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OZUF21YH\liveexup[1].cab/alliveex.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YFSNAT4R\keepmainM[1].cab/cns1.exe -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YFSNAT4R\liveexup[1].cab/alliveex.dll -> Adware.Cdn : Ignored.
    C:\Program Files\3721\__delete_on_reboot__a_l_L_i_v_e_E_x_._d_l_l_ -> Adware.Cdn : Ignored.
    C:\Program Files\3721\__delete_on_reboot__s_c_r_b_l_o_c_k_._d_l_l_ -> Adware.Cdn : Ignored.
    C:\Program Files\3721\alliveex.dll_tobedeleted -> Adware.Cdn : Ignored.
    C:\Program Files\3721\scrblock.dll_tobedeleted -> Adware.Cdn : Ignored.
    C:\WINDOWS\Downloaded Program Files\keepmainM.cab/cns1.exe -> Adware.Cdn : Ignored.
    C:\WINDOWS\system32\cns.exe -> Adware.Cdn : Ignored.
    C:\WINDOWS\system32\drivers\84593.sys -> Adware.Cdn : Ignored.
    [1736] C:\PROGRA~1\3721\alLiveEx.dll -> Adware.Cdn : Ignored.
    [388] C:\PROGRA~1\3721\alLiveEx.dll -> Adware.Cdn : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\2L1H6780\helperup[1].cab/helper.dll -> Adware.Cnshel : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\DHXV8XAW\helperup[1].cab/helper.dll -> Adware.Cnshel : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OL6VMZ8P\helperup[1].cab/helper.dll -> Adware.Cnshel : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OZUF21YH\CnsMinAL[1].cab/AutoLive.dll/helper.dll -> Adware.Cnshel : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OZUF21YH\helperup[1].cab/helper.dll -> Adware.Cnshel : Ignored.
    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YFSNAT4R\CnsMinAL[1].cab/AutoLive.dll/helper.dll -> Adware.Cnshel : Ignored.
    C:\Program Files\3721\3721\helper.dll -> Adware.Cnshel : Ignored.
    C:\Program Files\3721\__delete_on_reboot__h_e_l_p_e_r_._d_l_l_ -> Adware.Cnshel : Ignored.
    C:\Program Files\3721\autolive.dll/helper.dll -> Adware.Cnshel : Ignored.
    C:\Program Files\3721\autolive.dll_tobedeleted/helper.dll -> Adware.Cnshel : Ignored.
    C:\Program Files\3721\helper.dll_tobedeleted -> Adware.Cnshel : Ignored.
    C:\WINDOWS\Downloaded Program Files\CnsMinAL.cab/AutoLive.dll/helper.dll -> Adware.Cnshel : Ignored.
    C:\WINDOWS\Downloaded Program Files\autolive.dll/helper.dll -> Adware.Cnshel : Ignored.
    [1956] C:\PROGRA~1\3721\helper.dll -> Adware.Cnshel : Ignored.
    [284] C:\PROGRA~1\3721\helper.dll -> Adware.Cnshel : Ignored.
    [3172] C:\PROGRA~1\3721\helper.dll -> Adware.Cnshel : Ignored.
    [3692] C:\PROGRA~1\3721\helper.dll -> Adware.Cnshel : Ignored.
    [472] C:\PROGRA~1\3721\helper.dll -> Adware.Cnshel : Ignored.
    HKLM\SOFTWARE\3721 -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\Assist -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\Assist\Modules -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\AutoLive -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\AutoLive\scrblock -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\CnsMin -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\CnsMinCg -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\3721\CnsMin\CnsMinEx -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\AutoLive.Live -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\AutoLive.Live.1 -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\AutoLive.Live\CLSID -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\AutoLive.Live\CurVer -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\CnsHelper.CH -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\CnsHelper.CH.1 -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\CnsHelper.CH\CLSID -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Classes\CnsHelper.CH\CurVer -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\AutoUpdate -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Enable -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Hint -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\List -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Reset -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\ResetCatch -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS\Tips -> Adware.CnsMin : Ignored.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\3721 -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\3721\CnsMin -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\3721\CnsMin\Variant -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\3721\CnsUrl -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\3721\InputCns -> Adware.CnsMin : Ignored.
    HKU\S-1-5-21-823518204-1326574676-839522115-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38928D50-8A48-44C2-945F-D2F23F771410} -> Adware.CnsMin : Ignored.
    C:\Sorted document\Gammon-doc\abc\Target Architecture Project\Working\Chung\vnc-3.3.3r9_x86_win32.zip/vnc_x86_win32/vncviewer/vncviewer.exe -> Not-A-Virus.RemoteAdmin.Win32.WinVNC.333 : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@cnetasiapacific.122.2o7[2].txt -> TrackingCookie.2o7 : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@admarketplace[1].txt -> TrackingCookie.Admarketplace : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@admarketplace[2].txt -> TrackingCookie.Admarketplace : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@adtech[2].txt -> TrackingCookie.Adtech : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@com[2].txt -> TrackingCookie.Com : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfkiahajccq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfkickdjolo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfkieic5gbo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfkoqkcjkgp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfkyamajako.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfl4uodpkfo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfmigjcjafq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wfmyklazagp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjk4oncpkfq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjkyeldpwkp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjkyolazkho.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjloalcpofo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjloogcjcgp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjmyeicjiap.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjny-1kcjia.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjnygkcpgfo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjnygmdjogo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjnyogazido.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@e-2dj6wjnyukd5eco.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@www.myaffiliateprogram[1].txt -> TrackingCookie.Myaffiliateprogram : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@starware[2].txt -> TrackingCookie.Starware : Ignored.
    C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignored.


    ::Report end
    Last edited by tashi; 2006-10-05 at 21:19. Reason: Moved topic from Spybot-S&D forum

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello, please follow the instructions in our 'sticky' topic to produce a HJT log.
    BEFORE you post and who will advise you. Preliminary Steps

    Then a helper will assist you as soon as available to do so.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    This topic has been closed to prevent others with similar issues posting in it.
    If you need it re-opened please send me or your helper a private message (pm) and provide a link to the thread.

    Applies only to the original topic starter.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •