Dear All,
I tried to remove a virus that is cnsmin i think, using norton, avg antivirus and adaware and spybot search and destroy. It detects everytime i run even in safe mode, but while removing, it does not completely remove all the infected files and registry entries.
Is there any specific removal tools available for this? The client is using a chinese version of Windows xp so i cannot understand all the errors that are shown.

Plz help me.
Thanks

sorry, i forgot to mention that adaware and spybot both ask if i want to schedule a startup scan as they were unable to remove some entries. I click yes. but after startup, none of them do a scan automatically.

thanks

try scanning AFTER system restore is disabled. The turn it back on after the infection is cleaned out.

Hopefully my advice will help you...Please post back with your results....thanks

Thanks for the reply.

I tried to restore system back to few days before the problem existed but still no use. Can system restore option being enabled hamper the effective removal of the virus? Cuz it says that some infections have been cleaned but still some infections still remain.

Thanks

sometimes the viruses are located in the system restore, so if you don't turn it off, they will remain in there and keep re-occuring

Hopefully my advice will help you...Please post back with your results....thanks

thanks again for the information, but by disabling system restore also didnt fix the problem. I still cannot remove all the entries that is detected by adaware or spybot.
I will format c: drive and install a new xp for him. though i wish i had a solution which did not involve formating.

I have been thru the forums and googled around for it but havnt found a good solution for this virus/spyware yet.

Thanks anyways for ur help.

Could try this page: http://www.vcn.com/knowledgebase/ar...

Larry

Sometimes I think I understand everything, then I regain consciousness

seawatch, that's a great page! The only thing is, that most of the time the spyware isn't installed in add/remove so it has to be removed amnually or using progs. BUT, if it's in there, it would be good to remove it, that's for sure.

biksnp, try this free on-line scan and remove all it finds
http://www.spywareinfo.com/xscan.php

Hopefully my advice will help you...Please post back with your results....thanks

Just trying to help. :)

But you're right, if it's not in the Add/Remove section, that answer won't help much.

Sometimes I think I understand everything, then I regain consciousness

like I said seawatch, it is a great page and I'll keep the address for future references!
Thanks

Hopefully my advice will help you...Please post back with your results....thanks

Thank you all for your help and time. The client was in a hurry so he formated the computer himself. If I have any other problems i will get back to you all.

I have learned many things from this site, as i visit this site often.

Keep up the good work guys.

Thanks again all.