Top 10 Alerts

Latest 10 Malware Files

Testimonials

Hello, bought a license for your antivirus tool and I must say it was totally awesome! It cleaned TDSServ trojan which was a real pain in the ass for the last 8 months and it also found and killed Virtumonde together with all its files and a few other low level infections. I was already thinking about formatting and losing tons of information when I found your tool on the internet.

Thanks and please put this message where people can see it.

Andrei T.

More ...

CnsMin Registry Values

Scan your Windows registry for CnsMin

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, cnsmin=Rundll32.exe [%WINDOWS%]\DOWNLO~1\CnsMin.dll,Rundll32
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://search.jword.jp/jwd_sb_srchcust.htm?ielang={SUB_RFC1766}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://search.jword.jp/jwd_sb_srchasst.htm?ielang={SUB_RFC1766}
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=15745959
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=15745959
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, helper.dll=[%SYSTEM%]\rundll32.exe [%PROGRAM_FILES%]\3721\helper.dll,Rundll32
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {1b0e7716-898e-48cc-9690-4e338e8de1d3}=Assistant
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks, {406f94f0-504f-4a40-8dfd-58b0666abebd}=coolbar
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8193
HKEY_CLASSES_ROOT\interface\{c3a9f7f8-8862-496a-b8a4-25d4140b7dbc}\typelib, version=1.0
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://seek.3721.com/srchcust.htm
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://seek.3721.com/srchasst.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsautoupdate=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsenable=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnshint=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-1835797972
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-488313880
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8195
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-254186058
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-254186058
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://seek.yisou.com/srchcust.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8194
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://seek.yahoo.com.cn/srchasst.htm
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks, {d157330a-9ef3-49f8-9a67-4141ac41add4}=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-1629679338
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls, [%WINDOWS%]\downloaded program files\cnsmin.dll=1
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://seek.yisou.com/srchasst.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8196
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=981499335
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=981499335
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8199
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks, {bb936323-19fa-4521-ba29-eca6a121bc78}=coolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {bb936323-19fa-4521-ba29-eca6a121bc78}=ЙПНшЦъКЦ
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=2123238666
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=2123238666
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://www.google.com/ie
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/autolive.dll, .owner={7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/autolive.dll, {7ca83cf1-3aea-42d0-a4e3-1594fc6e48b2}=
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8201
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1313411533
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1313411533
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://www.google.com
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://www.google.cn/ie
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8208
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-901371123
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=1382192164
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1382192164
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1382192164
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsautoupdate=1633248766
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1633248766
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1633248766
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=2023168153
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8192
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=581434338
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=581434338
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks, {b83fc273-3522-4cc6-92ec-75cc86678da4}=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {bb936323-19fa-4521-ba29-eca6a121bc78}=????
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=40186760
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=40186760
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://bar.baidu.com/sobar/defaultsearch.html
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://bar.baidu.com/sobar/defaultsearch.html
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1783689681
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1783689681
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1417719148
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1417719148
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8198
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-1567341945
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=-769671041
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-769671041
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://seek.addresscn.com/srchcust.htm
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://seek.addresscn.com/srchasst.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8202
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1141861660
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8203
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, ocustomizesearch=http://www.idgsearch.com/iec
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://www.2020search.com/search/9884/search.html
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8197
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-561996452
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-561996452
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=369284099
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=369284099
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=-21599292
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-21599292
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=presario&pf=desktop&parm1=seconduser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search, osearchassistant=http://search.yahoo.co.jp/search/msie?fr=tsbmsie
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=-1995886590
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-1995886590
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8200
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {1b0e7716-898e-48cc-9690-4e338e8de1d3}=ЙПНшЦъКЦ
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=104084809
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=-696717540
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-696717540
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-696717540
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=271516422
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=271516422
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=271516422
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=383236766
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=383236766
HKEY_CLASSES_ROOT\interface\{c3a9f7f8-8862-496a-b8a4-25d4140b7dbc}\typelib, version=1.0
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8193
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8194
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8196
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8197
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8198
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8199
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8200
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8201
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=8205
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsautoupdate=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsautoupdate=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsenable=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsenable=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnshint=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnshint=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=-2098635964
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=111144140
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=1983221471
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-166359622
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=-2098635964
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=106783455
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=108950908
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=111144140
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1783689681
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1983221471
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=1992718965
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-1968244308
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-2098635964
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=-756423529
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=106783455
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=111144140
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1249177499
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1591742634
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1783689681
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=1983221471
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=649113426
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks, {406f94f0-504f-4a40-8dfd-58b0666abebd}=coolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks, {d157330a-9ef3-49f8-9a67-4141ac41add4}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/autolive.dll, .owner={1B0E7716-898E-48CC-9690-4E338E8DE1D3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CnsMin=Rundll32.exe [%WINDOWS%]\DOWNLO~1\CnsMin.dll,Rundll32
HKEY_CLASSES_ROOT\clsid\{7ca83cf1-3aea-42d0-a4e3-1594fc6e48b2}\inprocserver32, threadingmodel=apartment
HKEY_CLASSES_ROOT\interface\{c3a9f7f8-8862-496a-b8a4-25d4140b7dbc}\typelib, version=1.0
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping, {5d73ee86-05f1-49ed-b850-e423120ec338}=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsautoupdate=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsenable=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnshint=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnslist=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsmenu=
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, cnsreset=
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks, {406f94f0-504f-4a40-8dfd-58b0666abebd}=coolbar
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks, {bb936323-19fa-4521-ba29-eca6a121bc78}=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\advancedoptions, !cns=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, buttontext=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, clsid=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, default visible=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, exec=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, hoticon=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{0f7de07d-bd74-4991-9d5f-ecbb8391875d}, icon=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {1b0e7716-898e-48cc-9690-4e338e8de1d3}=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar, {bb936323-19fa-4521-ba29-eca6a121bc78}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\ex, {b83fc273-3522-4cc6-92ec-75cc86678da4}=http://search.shopnav.com/apps/epa/epa?cid=shnv9886&s=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks, {b83fc273-3522-4cc6-92ec-75cc86678da4}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/autolive.dll, .owner=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/autolive.dll, {7ca83cf1-3aea-42d0-a4e3-1594fc6e48b2}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cns02.dat, .owner=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cns02.dat, {b83fc273-3522-4cc6-92ec-75cc86678da4}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cnsmin.dll, .owner=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/cnsmin.dll, {b83fc273-3522-4cc6-92ec-75cc86678da4}=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, cesmain.dll=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, cnsmin=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, helper.dll=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce, 3721[%PROGRAM_FILES%]\3721\autolive.dll253343=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls, [%WINDOWS%]\downloaded program files\cns02.dat=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls, [%WINDOWS%]\downloaded program files\cnshook.dll=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls, [%WINDOWS%]\downloaded program files\cnsmin.dll=

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533