"AddCLS.exe" what is it?

Norton Antivirus told me this file was infected with a
download trojan. I followed their instructions on how to
remove it from my system, and all is well so far. But, is
this file important to windows? I right clicked on it to
check the properties, and it was created the same day
that I reinstalled my windows, but was modified a few
weeks ago. I was just wondering if its something I need
for a legit program to run.

pacin

Pacin;

Scumware!!!!!!!!!

addcls.exe
This is adware component and IE homepage hijacker.
What it does?
(this program works with Windows NT/2000/XP only)
1. It registers the dp.dll or dpr.dll.
This file is located in your Windows folder.
2. Changes Internet Explorer homepage.
3. Adds the "AddClass" or "Class Start" values to the Registry Run
key:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
4. Connects to the Internet to get own updates.
Removal?
Kill "ADDCLASS.EXE" by RegRun Process Manager or by Task Manager.
Unregister "dp.dll" or "dpr.dll" if they exists.
Use this command:
regsvr32 /u dp.dll
Delete all related files.
=================
================

First.
Right click the IE icon | Properties | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them
in order to display the page properly or perform a particular task.]]
 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to
display the page properly or perform a particular task.]]

Apply | OK
=================================

Second.
It is known as Scumware. Visit these sites. 1, 2, 3 and 4 are really good.
Download, install, run, update and run again; one or all.
They are all good, FREE utilities.
The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=all#s-p

1) Spybot S & D
http://www.safer-networking.org/inde...&page=download

2) SpywareBlaster
SpywareBlaster doesn't scan and clean for spyware - it prevents it from ever
being installed.
http://www.javacoolsoftware.com/spywareblaster.html

3) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/index.html

4) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

4½) CWShredder
http://majorgeeks.com/download4086.html

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner...ource=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) AdAware
http://www.lavasoft.de/support/download/
===============

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default...7315#appliesto

--
Hope this helps. Let us know.
Wes

In ,
Pacin hunted and pecked:
Norton Antivirus told me this file was infected with a
download trojan. I followed their instructions on how to
remove it from my system, and all is well so far. But, is
this file important to windows? I right clicked on it to
check the properties, and it was created the same day
that I reinstalled my windows, but was modified a few
weeks ago. I was just wondering if its something I need
for a legit program to run.

pacin

So, once I remove the .dll's, I don't need this file?=20
Because aparently it was installed the same day that I=20
reinstalled my windows (and a lot of other progs).
-----Original Message-----
Pacin;

Scumware!!!!!!!!!

addcls.exe
This is adware component and IE homepage hijacker.
What it does?
(this program works with Windows NT/2000/XP only)
1. It registers the dp.dll or dpr.dll.
This file is located in your Windows folder.
2. Changes Internet Explorer homepage.
3. Adds the "AddClass" or "Class Start" values to the=20
Registry Run
key:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
4. Connects to the Internet to get own updates.
Removal?
Kill "ADDCLASS.EXE" by RegRun Process Manager or by Task=20
Manager.
Unregister "dp.dll" or "dpr.dll" if they exists.
Use this command:
regsvr32 /u dp.dll
Delete all related files.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= 3D
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D

First.
Right click the IE icon | Properties | Advanced tab |
Make sure both of these are NOT checked.

=1E Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install=20
Internet Explorer
components if a Web page needs them
in order to display the page properly or perform a=20
particular task.]]
=1E Enable Install On Demand (Other)
[[Specifies to automatically download and install Web=20
components if a Web
page needs them in order to
display the page properly or perform a particular task.]]

Apply | OK
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= 3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D

Second.
It is known as Scumware. Visit these sites. 1, 2, 3=20
and 4 are really good.
Download, install, run, update and run again; one or=20
all.
They are all good, FREE utilities.
The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=3Dall#s-p

1) Spybot S & D
http://www.safer-networking.org/index.php?
lang=3Den&page=3Ddownload

2) SpywareBlaster
SpywareBlaster doesn't scan and clean for spyware - it=20
prevents it from ever
being installed.
http://www.javacoolsoftware.com/spywareblaster.html

3) HijackThis (some other stuff that may be of=20
interest also)
http://www.spywareinfo.com/~merijn/index.html

4) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

4=BD) CWShredder
http://majorgeeks.com/download4086.html

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html?
source=3Dappvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) AdAware
http://www.lavasoft.de/support/download/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Unexplained computer behavior may be caused by deceptive=20
software
http://support.microsoft.com/default.aspx?scid=3Dkb;EN-
US;827315#appliesto

--=20
Hope this helps. Let us know.
Wes

In ,
Pacin hunted and pecked:
Norton Antivirus told me this file was infected with a
download trojan. I followed their instructions on how=20
to
remove it from my system, and all is well so far. But,=20
is
this file important to windows? I right clicked on it=20
to
check the properties, and it was created the same day
that I reinstalled my windows, but was modified a few
weeks ago. I was just wondering if its something I need
for a legit program to run.

pacin

.

Pacin;

No, you don't need it or want it.
Does not matter when it was installed.

--
Hope this helps. Let us know.
Wes

In ,
Pacin hunted and pecked:
So, once I remove the .dll's, I don't need this file?
Because aparently it was installed the same day that I
reinstalled my windows (and a lot of other progs).
-----Original Message-----
Pacin;

Scumware!!!!!!!!!

addcls.exe
This is adware component and IE homepage hijacker.
What it does?
(this program works with Windows NT/2000/XP only)
1. It registers the dp.dll or dpr.dll.
This file is located in your Windows folder.
2. Changes Internet Explorer homepage.
3. Adds the "AddClass" or "Class Start" values to the Registry Run
key:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
4. Connects to the Internet to get own updates.
Removal?
Kill "ADDCLASS.EXE" by RegRun Process Manager or by Task Manager.
Unregister "dp.dll" or "dpr.dll" if they exists.
Use this command:
regsvr32 /u dp.dll
Delete all related files.
=================
================

First.
Right click the IE icon | Properties | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them
in order to display the page properly or perform a particular task.]]
 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if
a Web page needs them in order to
display the page properly or perform a particular task.]]

Apply | OK
=================================

Second.
It is known as Scumware. Visit these sites. 1, 2, 3 and 4 are
really good. Download, install, run, update and run again; one or
all. They are all good, FREE utilities.
The first site gives some recommendations.
http://www.spywareinfo.com/downloads.php?cat=all#s-p

1) Spybot S & D
http://www.safer-networking.org/index.php? lang=en&page=download

2) SpywareBlaster
SpywareBlaster doesn't scan and clean for spyware - it prevents it
from ever being installed.
http://www.javacoolsoftware.com/spywareblaster.html

3) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/index.html

4) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

4½) CWShredder
http://majorgeeks.com/download4086.html

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html? source=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) AdAware
http://www.lavasoft.de/support/download/
===============

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default.aspx?scid=kb;EN-
US;827315#appliesto

--
Hope this helps. Let us know.
Wes

In ,
Pacin hunted and pecked:
Norton Antivirus told me this file was infected with a
download trojan. I followed their instructions on how to
remove it from my system, and all is well so far. But, is
this file important to windows? I right clicked on it to
check the properties, and it was created the same day
that I reinstalled my windows, but was modified a few
weeks ago. I was just wondering if its something I need
for a legit program to run.

pacin

.