CnsMin Adware - PrivacyAnywhere Spyware Research Library


	Home / Research


	CnsMin

Details of the CnsMin are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	CnsMin
Type:	Adware
Risk:
Description:	CnsMin is another keyword-lookup provider that takes over the search feature of IE's address bar. It is aimed at providing keywords using Chinese characters. Other than replacing the IE search feature with a Chinese site likely to be incomprehensible to non-Chinese users, CnsMin is not overtly harmful, but it uses extremely anti-social methods to make it difficult to uninstall. Is installed by ActiveX drive-by-download at its company's site, 3721.com. Has also apparently been included in junk e-mail, which could be how some Western users have ended up with it.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CLASSES_ROOT\3721.2.WM1PP
HKEY_CLASSES_ROOT\ADKiller.ADKillerObj
HKEY_CLASSES_ROOT\ADKiller.ADKillerObj.1
HKEY_CLASSES_ROOT\Assist.EasyAssist
HKEY_CLASSES_ROOT\Assist.EasyAssist.1
HKEY_CLASSES_ROOT\AutoLive.Live
HKEY_CLASSES_ROOT\AutoLive.Live.1
HKEY_CLASSES_ROOT\CnsMinHK.CnsHook
HKEY_CLASSES_ROOT\CnsMinHK.CnsHook.1
HKEY_CLASSES_ROOT\CoolBar.CoolBarObj
HKEY_CLASSES_ROOT\CoolBar.CoolBarObj.1
HKEY_CLASSES_ROOT\FFlash.FlashObjectInterface
HKEY_CLASSES_ROOT\FFlash.FlashObjectInterface.1
HKEY_CLASSES_ROOT\Interface\{172862CD-9D35-40E7-BAF2-BA7ECF043B9C}
HKEY_CLASSES_ROOT\Interface\{1BB0ABBE-2D95-4847-B9D8-6F90DE3714C1}
HKEY_CLASSES_ROOT\Interface\{48E688C8-609F-4B08-944E-3C7FAB99CD08}
HKEY_CLASSES_ROOT\Interface\{7436DB12-1A7A-4D87-A4E0-713EC9D86050}
HKEY_CLASSES_ROOT\Interface\{924F5B3A-7A27-484A-B873-E855C9708667}
HKEY_CLASSES_ROOT\Interface\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E}
HKEY_CLASSES_ROOT\Interface\{C3A9F7F8-8862-496A-B8A4-25D4140B7DBC}
HKEY_CLASSES_ROOT\TypeLib\{19069804-2CF0-4357-B696-BA6E9AAD99EF}
HKEY_CLASSES_ROOT\TypeLib\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1}
HKEY_CLASSES_ROOT\TypeLib\{7354662F-CAA3-448B-BC01-04F55A2DCA35}
HKEY_CLASSES_ROOT\TypeLib\{A5ADEAE7-A8B4-4F94-9128-BF8D8DB5E927}
HKEY_CLASSES_ROOT\TypeLib\{D4839331-534D-4D0C-875F-D25AF6A10CCC}
HKEY_CLASSES_ROOT\TypeLib\{F97E75A4-0103-4F27-A752-327B600B1130}
HKEY_CLASSES_ROOT\TypeLib\{F9AD9D67-EFA8-480E-8291-0163F3960DE7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\{6713E8D2-850A-101B-AFC0-4210102A8DA7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{C95FE080-8F5D-11D2-A20B-00AA003C157C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FD00D911-7529-4084-9946-A29F1BDF4FE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\assistse
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spdwinw2k\spdwinw2k.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1B0E7716-898E-48cc-9690-4E338E8DE1D3}
HKEY_LOCAL_MACHINE\SYSTEM\Services\CnsMinKP
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_CNSMINKP
HKEY_LOCAL_MACHINE\SYSTEM\CServices\CnsMinKP
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Quick Search (Yisou.com)\\CnsMinEx.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Currentversion\Run\helper.dll\3721\helper.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CnsMin\CnsMin.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CnsM.dll\3721\CnsM.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\CnsHook.dll\CnsHook.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\3721\autolive.dll3721\autolive.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\3721\cnsm.dll3721\cnsm.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\CnsMin.dllCnsMin.dll

News for Oct 7, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up