Ran the Ad-Aware SE scan found and deleted it. So it says but when I rescan
it, Win32 AdWare.Cinmus still show up (either in Normal ot Safe mode).
Its location CLSID \{385ABBC-FB22-4D17-8834-064E2BA0A6F0}

which when I go to the registry/location and expand there are 2 items
+ InprocServer32 - hightlight and right pan shows
default REG_SZ C:\DOC & SettING\ALL USERS\APPLICATION
DATA\MICROSOFT\PCTOOLS\PCTOOLS.DLL
Threading Model REG_SZ Apartment

+TypeLib and hightlight and right pan shows
the default REG_SZ {385ABBC-FB22-4D17-8834-064E2BA0A6F0}

can some advice what shall I do here? On item 1 do I hightlight the
Threading Model on the right pan and delete this item or instead of
'Apartment' leave it blank o

Many thanks for your education.

Re: after AdAware removal its still appears by Gene

Gene
Mon Nov 05 21:51:17 PST 2007

On 11/03/2007, labfuji posted this:
> Ran the Ad-Aware SE scan found and deleted it. So it says but when I rescan
> it, Win32 AdWare.Cinmus still show up (either in Normal ot Safe mode).
> Its location CLSID \{385ABBC-FB22-4D17-8834-064E2BA0A6F0}
>
> which when I go to the registry/location and expand there are 2 items
> + InprocServer32 - hightlight and right pan shows
> default REG_SZ C:\DOC & SettING\ALL USERS\APPLICATION
> DATA\MICROSOFT\PCTOOLS\PCTOOLS.DLL
> Threading Model REG_SZ Apartment
>
> +TypeLib and hightlight and right pan shows
> the default REG_SZ {385ABBC-FB22-4D17-8834-064E2BA0A6F0}
>
> can some advice what shall I do here? On item 1 do I hightlight the
> Threading Model on the right pan and delete this item or instead of
> 'Apartment' leave it blank o
>
> Many thanks for your education.

Wrong newsgroup, this is for Window Media Center, not viruses.

Ad-Aware is a spyware fighter. Win32 AdWare.Cinmus is a different and
unrelated thing. It's a virus.

--
Gene E. Bloch (Gino)
letters617blochg3251
(replace the numbers by "at" and "dotcom")