Excuse me, how is the 372 1 Internet Assistant (Yahoo Assistant) rogue?

First of all, you uninstalled 372 1 in the program file, which cannot be deleted.

Secondly, there are many things in the registry.

There is still a pile of rubbish in the system directory.

Security mode cannot be deleted.

Go to DOS (how many novices will? Haha, only 372 1 can be deleted.

There are still many questions. I was so busy when the software of 372 1 was not uninstalled.

Now that I have this software, I'm too lazy to start work and forget it.

In fact, there are many articles analyzing 372 1 on the Internet. Find it yourself.

After reading the TO of LZ, I found that you can't even read the registration form. What about 372 1? ! ? ! ? ! !

372 1 Tell netizens: You were raped by me (transferred from VERYCD).

After learning to surf the Internet, I thought I was in a more convenient world. However, this free and convenient world is ruled by 372 1

For five years, he plundered and ruled the capital crazily.

Since the establishment of 1998, 372 1 has always cherished the dream of Microsoft's browser and tried to build a network standard in China. It took 372 1 five years to spread his real name to 90% of China netizens through various channels and means, and this is the abundant capital accumulated by 372/kloc-0 during its five-year rule of China Internet. 372 1 This plug-in is a Chinese Internet tool on the surface, but in fact it uses a simple virus principle to control netizens behind it.

Fool China netizens with simple techniques.

Such a 372 1 under the banner of "simple internet access" has even become synonymous with "LJ" in the eyes of programmers.

Go to any website where programmers gather and check the comments related to 372 1 news. More than 90% of them are attacks on 372 1, even insults. Some programmers even mark on their personal websites: "If you are a supporter of 372 1, don't install this program. I don't welcome and refuse its supporters to use this program! "

First of all, programmers are never active in the technology of 372 1. In the programmer's view, there is really no technology to match domain names with Chinese words through client software.

At first, the software of 372 1 was distributed in the form of client, mainly through cooperation with websites, but this way was easily rejected or deleted by users. Soon, 372 1 adopted the activex technical standard issued by Microsoft, and turned the client into a browser plug-in. It should be said that many softwares are developed with activex technology, such as flash animation playing plug-in and Microsoft media player plug-in. This way is understandable, but 372 1 did not respect the wishes of users when implementing this way, but inevitably popped up harassment dialogs on various websites and forced installation. Some programmers said, "No matter how the software is written, one thing is certain. Developers and strategists lack the minimum professional ethics. How many of the so-called 20 million users voluntarily installed it? How many are stepping on mines? " At the same time, in some early versions, there were cases that caused users to crash and were widely spread.

So 372 1 seems to be deliberately doing some work against programmers. In order to prevent uninstallation and deletion, various technical means are adopted in the software. A programmer said, "Now the plug-in of 372 1 is becoming more and more overbearing. I not only modified the registry, but also kept running in your system, pretending to be myself. After I deleted cmin*. Dll, I checked it with winhex and renamed it run! And if you use softice to tune the program, the dll of 372 1 will always make trouble! " 372 1 is painstakingly adding various skills, some of which are exactly the same as the Trojan virus. All the software of 372 1 has a back door on your computer, which is the way for 372 1 to enter the depths of your computer. 372 1 When I was spying on you, you didn't know.

From the programmer's point of view, it is an insult to bring disgrace to oneself of 372 1 and China Internet to rape users' will with some skills of software development!

However, 372 1 chose to insult the Internet in China and the netizens in China in order to ensure its profit source and a shameless dream.

Underworld means to seize territory

However, 372 1 destroyed many netizens' basic right to use when they realized their dreams. Many unsuspecting netizens have been influenced by the dream of 372 1 after downloading the 372 1 plug-in unintentionally. The plug-in of 372 1 was also monitored when 90% of Internet users in China turned on their computers and started surfing the Internet.

Some netizens who know technology wrote in the comments on the forum: Some websites have not been very smooth these two days. At first, I thought it was a network problem, and other websites were normal, which ruled out the network reason. After removing the virus, I decompiled the only browser-related program in his computer-3721network real-name plug-in. When he saw the program code of 372 1, he said, "I was scared out in a cold sweat. It turns out that this program has a back door, and no one knows this back door. Other programs of 372 1 are accessed through this back door. In this program, I found a piece of code, which is the code to block those websites. Behind this code, there is a long list of familiar websites, some of which are blocked and some of which have not been enabled. This code is like a robot. After this code, if you add

Then Sina. Com will be blocked and cannot be accessed.

372 1 In order to keep his online real-name business, he had to keep the promotion of other plug-ins. This is how 372 1 threatened and forced many websites to plug him in. But many websites dare to be angry and dare not speak. * * * website is one of the victims, besides him, there is a long list.

327 1 is like the underworld of China Internet. He knows all the information in your computer. He occupies the Internet belonging to netizens in China, dividing him into his own territory and firmly controlling it. Even portal giants such as Sina, Sohu, Netease and qq are afraid of the arrogance of 372 1 and dare to get angry in front of 372 1.

372 1 Who's in charge?

Looking through the laws of the Internet, there is no regulation on the practice of 372 1, and even no administrative department or legislator at any level is aware of this problem. 372 1 is using its own laws to do whatever it wants and make its own rules of the game. Everyone should bow down and pay tribute.

On the one hand, he secretly installed it for netizens, on the other hand, he cruelly forced other websites to plug him in, otherwise he would "block" uncooperative websites. After all, he already owns 90% of the shares. On the one hand, he made money by publicly selling online real names, and even threatened Peking University. If he doesn't buy this word, he sells it to others.

Three policies make money openly and operate China Internet generously. The principles of equality, freedom and openness advocated by the Internet have disappeared before the interests of 372 1. The department that was originally deployed from top to bottom was helpless and even unaware of him.

The Internet in China is still dominated by 372 1 ... Who will take care of it? Nobody cares, nobody dares to care.

372 1 company challenges the endurance and endurance of netizens again and again. Constantly improve the technology, so that netizens can't block the real-name client of the company network. In the face of angry condemnation from netizens and spontaneous blocking actions, 372 1 Company is obviously prepared to fight these unruly netizens to the end at all costs.

Recently, we found that 372 1 company further improved their "anti-"shielding technology. In this way, the network real-name client will "permanently" reside in the user's computer system, even if the user chooses to uninstall the client. Unless the user reinstalls his computer system, the program cannot be cleaned manually.

When users browse the web, the installation window pops up, which neither uses the agreement nor shows the publishing company of the program, which is a serious fraud. At the same time, the program will not establish a "legal" program installation directory in the user's computer, and the user can't find the installed program in his computer system by general means, which undoubtedly seriously endangers the user's computer security.

Regarding the behavior of 372 1, some legal experts believe that 372 1 Company has seriously violated the relevant provisions in the Administrative Measures for the Security Protection of Computer Information Networks International Networking promulgated and implemented by People's Republic of China (PRC) and the State Council 1997, as well as the relevant contents of the Consumer Protection Law of People's Republic of China (PRC).

Here, on behalf of those users who suffer from the real name "virus" of 372 1 network, we condemn this immoral behavior of 372 1 company. Moreover, it is hoped that the relevant state departments will take this incident seriously, standardize the market order and create a good market environment.

Some netizens think that 372 1 client software has some virus properties.

1 is protected at the device driver layer, and starts immediately when it is turned on, even in safe mode. The name of this device is cnsminkp, and the driver is located in windows system 32 drivers cnsminkp.sys.

Once 2 cnsminkp.sys is loaded, the driver cannot be uninstalled by command, that is, net stop cnsminkp cannot stop the driver. The filing date of cnsminkp.sys is February-15, 2004, which was released only a few days ago.

3 The driver constantly detects whether cnsminkp.sys exists and whether cnsminkp.sys exists. If not, it will immediately rebuild the two files, and constantly check the registry under the service and software to ensure that the parameters of cnsminkp service are consistent with their settings. If it is changed, it will be restored immediately. In addition, ensure that cnsmin.dll participates in the election.

This stubborn way is determined to leave cnsminkp.sys and cnsminkp.sys in memory and hard disk, which makes the system performance decline rapidly.

Does cnsminkp.sys mean cnsminkep or cnsminkelprotect? As long as you have cnsminkp.sys under windowssystem32drivers, you will be caught.