Unknown virus

Discussion in 'malware problems & news' started by Pieter_Arntz, Jul 28, 2002.

Thread Status:
Not open for further replies.
  1. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
  2. It is not a virus..people download it and use it..but it does have spyware in it .

    Go here to get rid of it and you can snoop around the site..They will not hurt you :D :D :D

    http://www.3721.com/en/uninstall_e.htm


    How to turn off the Chinese Keywords function

    Click on the button below, for an easy turn on and off of the Chinese Keywords function:






    How to uninstall the Chinese Keywords browser enabler
    If you don't need to use the Chinese Keywords function and wish to completely remove the Chinese Keywords browser enabler software , please follow the following steps to uninstall the Chinese Keywords browser enabler software:

    Step one: Close all the application programs in use;
    Step two: Click here
    Step three: AT the prompt of a tip, reboot your computer immediately.

    Note:The third step is very important, which, if not followed, may result in abnormal IE performance when installing similar programs again.



    http://www.3721.com/en/use_e.htm

    _______________________________________________


    FYI>>>


    C:\WINNT\DOWNLO~1 Ŀ¼ÏÂ
    £¨ÕâÀïµÄ C:\WINNT\DOWNLO~1\ Ϊ C:\WINDOWS\DOWNLO~1\ ÏÂͬ£©

    2001-08-09 15:34 <DIR> 3721
    2001-08-02 17:03 40,960 cnsio.dll
    2001-08-08 14:14 102,400 CnsMin.dll
    2001-08-24 23:14 42 CnsMin.ini
    2001-08-09 10:18 13,848 CnsMinEx.cab
    2001-07-06 17:57 32,768 CnsMinEx.dll
    2001-08-25 02:52 115 CnsMinEx.ini
    2001-08-25 02:51 17,945 CnsMinIO.cab
    2001-08-02 17:02 32,768 CnsMinIO.dll
    2001-08-24 23:15 40,793 CnsMinUp.cab

    C:\WINNT\DOWNLO~1\3721 Ŀ¼ÏÂ

    2001-08-02 17:03 40,960 cnsio.dll
    2001-08-24 15:53 102,400 CnsMin.dll
    2001-07-06 17:59 213 CnsMin.inf
    2001-08-24 15:48 28,672 CnsMinIO.dll


    void main()
    {
    char buf[MAX_PATH];
    ::ZeroMemory(buf, MAX_PATH);
    ::GetWindowsDirectory(buf, MAX_PATH);
    char filename[MAX_PATH];
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\CnsMinIO.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\CnsMin.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\cnsio.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    }
     
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    MyNethingyman.

    The first applaud i´ll ever be allowed to use will be all yours. You´ve made someone very happy. Better said I did :D with your help.

    Thnx,

    Pieter

    [EDIT] Kept my promise LOL ~applaud~[/EDIT]
     
Loading...
Thread Status:
Not open for further replies.