Manual battle 3721 and Yahoo Assistant

When I browsed a webpage the day before yesterday, I was forced to install a bunch of rogue software such as 3721 and Yahoo assistant. Because my computer had a Lenovo one-click recovery function, I decided to manually delete the junk, after searching for and studying N posts on the internet, I finally found a way to manually cope with 3721 and Yahoo assistant. The following is a summary for your reference:

Immediately disconnect the network cable and press F8 to enter safe mode.

I. decisive battle Registry

Press Start-run and enter regedit and click OK to go to the Registry Editor.

1. HKEY-LOCAL-MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun Delete worker CnsMin

By the way, check whether there are any malicious programs under. CurrentVersionUninstall.

2. HKEY-LOCAL-MACHINESOFTWARE3721 killed 3721

.. SOFTWAREMicrosoftInternet assumeradvancedoptions Delete :! CNS

Check whether there are malicious plug-ins under. Internet assumeractivex Compatibility.

Go to the. Internet assumerextensions page and find all Yahoo 1g emails, interesting treasure hunt, Yahoo assistant, and chat plug-ins.

3. HKEY-CURRENT-USERSoftware3721 killed 3721

.. SoftwareMicrosoftInternet assumermenuext check for malware.

Ii. Deleting malicious programs and files

1. Delete malicious programs such as "Network Real Name" in "start-control panel-add or delete programs.

2. Delete malicious files on the hard disk. Check the following three items:

C: Windows (this directory contains a central *. dat file)

C: WindowsDownload Program Fils

C: WindowsSystem32Drivers

3. In IE browser, click "tools-Internet Options" and click "delete Cookies", "Delete Files", and "Clear history ".

Difficulties: HKEY-LOCAL-MACHINESYSTEMControlSet001ServicesCnsMinKP (total prompt: Unable to delete CnsMinKP: An error occurred when deleting), must be placed in the windows installation disk, restart the computer, press the Del key to set to boot the system from the disc. Then press the R key to repair the operating system and enter del c: WINDOWSSYSTEM32DRIVERSCNSMINKP. SYS.

Iii. replaying the Registry

Click Start-run and enter regedt32.

HKEY-LOCAL-MACHINESYSTEMControlSet001EnumRootLEGACY-CNSMINKP

. ControlSet001ServicesCnsMinKP ?????????

HKEY-LOCAL-MACHINESYSTEMCurrentControlSetEnumRootLEGACY-CNSMINKP

Right-click "LEGACY_CNSMINKP", click "permission", click "allow Everyone" full control ", and then delete it.

4. Win and chase the remaining

Open "my computer-tools-Folder Options-View", remove the "Hide protected operating system files" check box, and click "show all files and folders ".

"Start-search", with "3721, Yahoo, Central, helper, CnsMin, cnsio" as keywords, in "other advanced options", select "search system folders, search hidden files and folders, and search subfolders" to delete the searched malicious files.

If you do not enter a keyword, click "when to modify", select "specify date-create date", and enter the time range to search for and check for malicious files.

Enter the registry, enter malicious program keywords in "edit-search target", search for and check for malicious files.

After several tossing times, 3721 and Yahoo's assistant made it difficult to roll over the salted fish.