-----Original Message-----
Pacin;
Scumware!!!!!!!!!
addcls.exe
This is adware component and IE homepage hijacker.
What it does?
(this program works with Windows NT/2000/XP only)
1. It registers the dp.dll or dpr.dll.
This file is located in your Windows folder.
2. Changes Internet Explorer homepage.
3. Adds the "AddClass" or "Class Start" values to the Registry Run
key:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
4. Connects to the Internet to get own updates.
Removal?
Kill "ADDCLASS.EXE" by RegRun Process Manager or by Task Manager.
Unregister "dp.dll" or "dpr.dll" if they exists.
Use this command:
regsvr32 /u dp.dll
Delete all related files.
=================
================
First.
Right click the IE icon | Properties | Advanced tab |
Make sure both of these are NOT checked.
Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them
in order to display the page properly or perform a particular task.]]
Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if
a Web page needs them in order to
display the page properly or perform a particular task.]]
Apply | OK
=================================
Second.
It is known as Scumware. Visit these sites. 1, 2, 3 and 4 are
really good. Download, install, run, update and run again; one or
all. They are all good, FREE utilities.
The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=all#s-p
1) Spybot S & D
http://www.safer-networking.org/index.php? lang=en&page=download
2) SpywareBlaster
SpywareBlaster doesn't scan and clean for spyware - it prevents it
from ever being installed.
http://www.javacoolsoftware.com/spywareblaster.html
3) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/index.html
4) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe
4½) CWShredder
http://majorgeeks.com/download4086.html
5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html? source=appvisit
6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm
7) AdAware
http://www.lavasoft.de/support/download/
===============
Additional information & instructions.
A wealth of information here, boys and girls.
THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm
THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm
Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default.aspx?scid=kb;EN-
US;827315#appliesto
--
Hope this helps. Let us know.
Wes
In
Pacin said:
Norton Antivirus told me this file was infected with a
download trojan. I followed their instructions on how to
remove it from my system, and all is well so far. But, is
this file important to windows? I right clicked on it to
check the properties, and it was created the same day
that I reinstalled my windows, but was modified a few
weeks ago. I was just wondering if its something I need
for a legit program to run.
pacin
.
