Unknown virus

Discussion in 'malware problems & news' started by Pieter_Arntz, Jul 28, 2002.

Thread Status:
Not open for further replies.
  1. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
  2. It is not a virus..people download it and use it..but it does have spyware in it .

    Go here to get rid of it and you can snoop around the site..They will not hurt you :D :D :D

    http://www.3721.com/en/uninstall_e.htm


    How to turn off the Chinese Keywords function

    Click on the button below, for an easy turn on and off of the Chinese Keywords function:






    How to uninstall the Chinese Keywords browser enabler
    If you don't need to use the Chinese Keywords function and wish to completely remove the Chinese Keywords browser enabler software , please follow the following steps to uninstall the Chinese Keywords browser enabler software:

    Step one: Close all the application programs in use;
    Step two: Click here
    Step three: AT the prompt of a tip, reboot your computer immediately.

    Note:The third step is very important, which, if not followed, may result in abnormal IE performance when installing similar programs again.



    http://www.3721.com/en/use_e.htm

    _______________________________________________


    FYI>>>


    C:\WINNT\DOWNLO~1 Ŀ¼ÏÂ
    £¨ÕâÀïµÄ C:\WINNT\DOWNLO~1\ Ϊ C:\WINDOWS\DOWNLO~1\ ÏÂͬ£©

    2001-08-09 15:34 <DIR> 3721
    2001-08-02 17:03 40,960 cnsio.dll
    2001-08-08 14:14 102,400 CnsMin.dll
    2001-08-24 23:14 42 CnsMin.ini
    2001-08-09 10:18 13,848 CnsMinEx.cab
    2001-07-06 17:57 32,768 CnsMinEx.dll
    2001-08-25 02:52 115 CnsMinEx.ini
    2001-08-25 02:51 17,945 CnsMinIO.cab
    2001-08-02 17:02 32,768 CnsMinIO.dll
    2001-08-24 23:15 40,793 CnsMinUp.cab

    C:\WINNT\DOWNLO~1\3721 Ŀ¼ÏÂ

    2001-08-02 17:03 40,960 cnsio.dll
    2001-08-24 15:53 102,400 CnsMin.dll
    2001-07-06 17:59 213 CnsMin.inf
    2001-08-24 15:48 28,672 CnsMinIO.dll


    void main()
    {
    char buf[MAX_PATH];
    ::ZeroMemory(buf, MAX_PATH);
    ::GetWindowsDirectory(buf, MAX_PATH);
    char filename[MAX_PATH];
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\CnsMinIO.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\CnsMin.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    ::ZeroMemory(filename, MAX_PATH);
    strcpy(filename, buf);
    strcat(filename, "\\Downloaded Program Files\\cnsio.dll");
    ::MoveFileEx(filename, NULL, MOVEFILE_DELAY_UNTIL_REBOOT);
    }
     
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    MyNethingyman.

    The first applaud i´ll ever be allowed to use will be all yours. You´ve made someone very happy. Better said I did :D with your help.

    Thnx,

    Pieter

    [EDIT] Kept my promise LOL ~applaud~[/EDIT]
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.