Adware Downreceive Spyware
Type: Adware (Previously called Spyware)
Publisher: Acceleration Software International Corp.Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
This spyware threat can be detected only by free Spyware Scanner software that support expanded threats.
The Spyware's Behavior
Spyware Downreceive is a component that is used to install the Webcelerator adware software. A program named Systimer.exe, which is the adware's advertising process; runs on your system's startup.The spyware files will be able to be detected as Adware under the file name(s) 'Downreceive'.
This adware program must be manually installed. There are several programs that have Downreceive's spyware within them and that install it as the program itself is installed.
File names: eac_ drec.dll; download.exe
Adware 'Downreceive' installs an advertising process (Systimer.exe) that runs on system startup. The spyware contacts the parent server and downloads and displays advertisements.
When Downreceive's Spyware is executed, it performs the following
Creates the folder, C:\Program Files\ Acceleration Software, and then inserts several spy files and subfolders in this folder.Creates the registry keys:
HKEY_LOCAL_MACHINE\Software\Acceleration Software Internation Corporation
HKEY_CURRENT_USER\Software\Acceleration Software International Corporation
Adds the value:
"value"="systimer.exe"
to the registry key:
HKEY_LOCAL_MACHINE\Software\
Microsoft\CurrentVersion\Run
*Try to uninstall the Download Receiver using your Add/Remove Programs utility.
*Make sure you run a full system spyware scan and delete all the spyware files detected as Adware under the file name(s) Downreceive.
The Delete the spyware value that was added to the registry.
Uninstalling the Spyware
Do one of the following:On the Windows 98 taskbar:
Click Start > Settings > Control Panel.
In the Control Panel window, double-click Add/Remove Programs.
On the Windows Me taskbar:
Click Start > Settings > Control Panel.
In the Control Panel window, double-click Add/Remove Programs.
If you do not see the Add/Remove Programs icon, click "...view all Control Panel options."
On the Windows 2000 taskbar:
By default, Windows 2000 is set up the same way as Windows 98. In that case, follow the instructions for Windows 98. Otherwise, click Start, point to Settings, point to Control Panel, and then click Add/Remove Programs.
On the Windows XP taskbar:
Click Start > Control Panel.
In the Control Panel window, double-click Add or Remove Programs.
Click Download Receiver.
Click Add/Remove, Change/Remove, or Remove (this varies with the operating system). Follow the prompts.
Scanning for and Deleting the Spyware files
Run your free Spyware Scanner and make sure that it is configured to scan all files.Run a full system spyware scan.
If any files are detected as spyware infected with the Adware Downreceive, click Delete.
Deleting the Spyware Values from the Registry
Click Start, and then click Run. (The Run dialog box appears.)Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run
In the right pane, delete the value:
"value"="systimer.exe"
Exit the Registry Editor.
Unregister the .dll spyware file
Follow these steps only if you were not able to delete the file, eac_drec.dll, when you ran your spyware scanner.
Click Start > Run.
Type command, and then click OK.
Click Browse, and browse to and select the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Select the regsvr32 file, and then click OK.
Add the following text to the end of the line:
/u "C:\Program Files\Common Files\eAcceleration\eac_drec.dll"
When you are done, it should look like this:
regsvr32 /u "C:\Program Files\Common Files\eAcceleration\eac_drec.dll"
Click OK, and then run the spyware scan again.
You will find much more on this topic at WorldsLargestNetwork.com
 |
|
|
|
|
WorldsLargestNetwork.com
