Click on screenshot to zoom
Danger level 9
Type: Trojans
Common infection symptoms:
  • Connects to the internet without permission
  • Shows commercial adverts
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
  • Installs itself without permissions
Other mutations known as:
Trojan.Cinmus.K

Trojan.Cinmus

Yet another treacherous backdoor Trojan, Trojan.Cinmus, has been attacking innocent PC users all around the world, and its shocking ability to slither inside systems unnoticeably, has created many security problems for countless Windows users. Conveniently, Trojan.Cinmus is combined of various, malignant executables, dynamic link library and system files, which are highly important in order for Trojan.Cinmus to run without being detected and removed. See some of the malignant files you should look out for, in order to identify Trojan.Cinmus in your Windows operating system.

malware.exe
msseces.exe
ntptdb.sys
syswindrv.dll

Both Trojan.Cinmus .dll and .sys files are essential for the infection’s processes, as ntptdb.sys implements a rootkit technique to hide unauthorized Trojan’s processes from existing security implements. This system file also creates background service, which controls some of the Trojan.Cinmus processes and may cause your whole system to start running slowly, without any noticeable reason. This system crippling symptom, however, may be the first sign of an infection, helping you to identify Trojan.Cinmus and remove it, before much damage is done. Another malicious Trojan’s component syswindrv.dll is a worm, a kind of malware, which can easily use your system to spread to other computers, and causes some network disabilities, from consumed bandwidth to removed access to any connection. Like most Trojan.Cinmus’ files, syswindrv.dll travels via encrypted downloads, so be careful, if you acquire software from illegal sites!

One of the most harmful Trojan.Cinmus components is msseces.exe, which is responsible for many of the Trojan’s processes. This executable can add infection’s registry key to the system’s start-up, hijack processes and can add or remove files. Besides causing such havoc, msseces.exe is also an information stealer, which means that every person, infected by Trojan.Cinmus, may be at risk of identity theft! This component can read your browsing activity, record mouse activity and Keyboard input, all of which may end up in your passwords or user names being copied and sent to remote servers. There is no way of telling how Trojan.Cinmus’s schemers could use this information. Msseces.exe may also download additional malware, like keyloggers or adware, which could cause even more harm. Also note that this Trojan.Cinmus executable is a cloaked malware, which means that it may camouflage itself with a name of a legitimate Windows file. The real msseces.exe is a legitimate part of Microsoft Security Essentials, which works as an antivirus and can monitor various Windows application. This file is originally found under C:\Program Files, and is no less than 957,776 bytes. Trojan.Cinmus’s fictitious component may be found under C:\Windows or C:\Windows\System32 folders.

If you do not want Trojan.Cinmus to monitor you activities, install other malicious applications or put you in danger of identity theft, remove this Trojan without waiting a second longer. It is best you do not venture into manual Trojan.Cinmus removal, as this task is extremely complex, and automatic removal can be much more efficient and quicker, once you realize infection’s existence and remove Trojan.Cinmus from your PC.

Download Spyware Removal Tool to Remove* Trojan.Cinmus
  • Quick & tested solution for Trojan.Cinmus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Trojan.Cinmus

Files associated with Trojan.Cinmus infection:

ClamAVFile
qfhfxogshdw.exe
msseces.exe
malware.exe
syswindrv.dll
ntptdb.sys
msseces.exe
qfhfxogshdw.exe

Trojan.Cinmus DLL's to remove:

syswindrv.dll

Trojan.Cinmus processes to kill:

qfhfxogshdw.exe
msseces.exe
qfhfxogshdw.exe
msseces.exe
malware.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.