ThreatExpert's Statistics for not-a-virus:AdWare.Win32.Cinmus.snf [Kaspersky Lab]:

not-a-virus:AdWare.Win32.Cinmus.snf [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
Trojan.Cinmeng [Symantec]	5
Adware-Cinmus [McAfee]	2
Generic PUP.x [McAfee]	1
not-a-virus:AdWare.Win32.BHO.cst [Kaspersky Lab]	1
Troj/BHO-YY, Troj/BHO-GC [Sophos]	1
Trojan:Win32/Cinmeng [Microsoft]	1
Trojan-Downloader.Win32.Agent.afxd [Kaspersky Lab]	1
Trojan-Spy.Win32.Pophot.cjd [Kaspersky Lab]	1

not-a-virus:AdWare.Win32.Cinmus.snf [Kaspersky Lab] has the following possible country of origin:

Origin		Number of Incidents
	China	3

not-a-virus:AdWare.Win32.Cinmus.snf [Kaspersky Lab] is known to be created as:

%System%\0914\1346.exe

%System%\0914\msn080.exe

%Temp%\msn036.exe

%Temp%\msn061.exe

%Windir%\sebs\pbhealth.dll

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.