Please help us Remove CNSMIN 3721

Please help us Remove CNSMIN 3721!


Yahoo! asked us if we wanted "Yahoo! China!" We clicked Yes, and have regretted it ever since.


Yahoo! then proceeded to install CNSMIN 3721. It is parasite software owned and operated by Yahoo! China. At first it was called Yahoo! Assistant. Now it is just called CSNMIN 3721. It is malicious software that hijacks basic browser functions.


Once it is in your computer, it is almost impossible to remove.


We are begging for help from anyone who can tell us how to permanently remove cnsmin.


In addition, please be warned that apparently Yahoo! endorses the seeding of this malicious software, and therefor Yahoo! may now be an entity to be completley avoided in all of its forms. This is very sad to us, because we have been with Yahoo! almost since its beginning. But if we cannot trust Yahoo! not to load malicious software into our machines, then we are regrettably saying goodbye, and also warning others to avoid any further contact with Yahoo! at all costs, unless you want your computers infected with malicious software that slows down your computers and hijacks basic browser functions.


We'd like to hear from others who have had this problem with CNSMIN 3721. We will share the removal process if we ever find out what it is.


Does Yahoo! realize the damage this software is doing to Yahoo!'s reputation and good will? Has anyone complained to Yahoo!?


In any case, immediate help removing CNSMIN 3721 will be most appreciated.


Thank you.

Might want to try this below. I haven't tried it, but a quick google of your problem found numerous websites with removal instructions. Standard warning, backup registry before playing with it.


http://www.spywareguide.com/product_show.php?id=469


In Windows NT/2000/XP it is possible to move the files so that they cannot be reloaded. Open the Command prompt (Start -> Programs -> Accessories) and type:


cd "%WinDir%\Downloaded Program Files"

ren CnsMin.dll CnsDel.dll

Reboot and load the Command prompt again. Type:


cd "%WinDir%\Downloaded Program Files"

del cns*.*

The first time you reboot after deleting or moving CnsMin you'll get an error about not being able to find it. Ignore this. To clean up the remaining traces of the software that cause this, open the registry (Start -> Run -> regedit) and delete the following keys:


HKEY_CLASSES_ROOT\CLSID\{B83FC273-3522-4CC6-92EC-75CC86678DA4}

HKEY_CLASSES_ROOT\CLSID\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}

HKEY_CLASSES_ROOT\CnsHelper.CH

HKEY_CLASSES_ROOT\CnsHelper.CH.1

HKEY_CLASSES_ROOT\CnsMinHK.CnsHook

HKEY_CLASSES_ROOT\CnsMinHK.CnsHook.1

HKEY_CURRENT_USER\Software\3721

HKEY_LOCAL_MACHINE\Software\3721

HKEY_LOCAL_MACHINE\Software\InterChina

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AdvancedOptions\!CNS

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{5D73EE86-05F1-49ed-B850-E423120EC338}

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71}

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{FD00D911-7529-4084-9946-A29F1BDF4FE5}

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\CnsMin

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin

Thank you TMK...we have tried many soltions on the Internet, including this one...oh well...thanks for taking the time...

Thanks A4XGR...csnmin is able to regenerate itself instantly...from the registry and also from ActiveX files...I am not a computer person...but have found that this pernicious software is nearly impossible to remove...and therefor I am furious with Yahoo!...and yes...and complete disk wipe appears to be the only answer...unless someone else knows a way to get rid of it completely...

"SpyBot Search and Destroy" is a good, and free, utility for finding and removing many known malware / spyware programs that may be lurking on a computer. The "CNSMIN" malware is listed in there database and info in this regards reads: "...Spybot-S&D can detect and remove the 3721 variant of CnsMin..." , so SpyBoy S&D might be able to detect and remove it for you effectively . You can find more info about Spybot S&D over at their website at:

http://www.safer-networking.org/en/


Or go directly to their downloads page at:

http://www.safer-networking.org/en/mirrors/index.html


If Spybot S&D still seems to not be able to remove it, then try booting your computer into Safe Mode and then run Spybot S&D while in Safe Mode. In normal-boot-up mode, spyware / malware like to load themselves in and also try to "protect" themselves from removal, wheras in Safemode, generally only the minimal drivers and such are loaded in, and thus it's usually easier to try and remove any spyware / malware.



Good luck.

Thank you Echo 39. CNSMIN has the capability of regenerating itself, no matter what attempts are made to dislodge it. Apparently only a disk wipe and clean install can get rid of it.

I just used Spybot S&D successfully to remove CNSMIN. Worked very well.