Everytime I click on My computer I get a message

  • Thread starter Thread starter Nyeishia
  • Start date Start date
N

Nyeishia

Everytime I click on "my Computer" I get a message
saying "This module was compiled with a trial version of
Delphi. This trail has expired"
 
Plus most likely it will be listed in either MSConfig or as an addin to IE
(eg a BHO cos it does Explorer as well) listed under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browse
r Helper Objects (then look up number under HKEY_CLASSES_ROOT\CLSID to find
the file.

Use Spy++ to identify the process owning the dialog (email me and I lend you
the file) or try and identify which process appears when you start it in
Task Manager's Process tab (press Ctrl + Alt + Delete).
 
Everytime I click on "my Computer" I get a message
saying "This module was compiled with a trial version of
Delphi. This trail has expired"
Click to expand...

Nyeishia,

This appears to be spyware. It is being discussed in SWI Forums,
where you can get expert advice. Start with this article, which
contains all the instructions you need:
<http://forums.spywareinfo.com/index.php?showtopic=5187>

Cheers,


Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.
 
In addition to David's advice:

Download MVP Doug's Windows XP Startup Programs Tracker and post the LOG
file here:
http://www.dougknox.com/xp/utils/xp_starttrack.htm

and download Hijackthis from the following site and post the results to
newsgroup or send a mail to me. (remove the text "REMOV_NOSPAM" in the email
address)

HijackThis:
http://www.spywareinfo.com/~merijn/

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


Everytime I click on "my Computer" I get a message
saying "This module was compiled with a trial version of
Delphi. This trail has expired"
 
Nyeishia,

This appears to be spyware. It is being discussed in SWI Forums,
where you can get expert advice. Start with this article, which
contains all the instructions you need:
<http://forums.spywareinfo.com/index.php?showtopic=5187>
Click to expand...

Here's a discussion about it that may help you (look out, here's one
looong URL):
<http://groups.google.com/groups?hl=...compiled+with+a+trial+version+of+&sa=N&tab=wg>.

Cheers,

Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.
 
Borland has done some investigation and found that the culprit must be
a module CPR.DLL which apparently has been compiled by somebody
(unknown) using a trial version of Delphi and then distributing it somehow.
The trial version used has an expiration date of November 26th (so the
compilation must have taken place on or after September 27th).

The solution is to remove (uninstall) CPR if it appears in the list of
installed programs or manually remove CPR from the applicable
folder(s).

According to Borland no undesired side effects have been reported
when just removing CPR

Users may have to start their computers in safe mode for this repair.

regards Sven
 
You can delete files in use by renaming them and rebooting, then deleting the renamed file.
 
Back
Top