Malicious Add-on?

  • Thread starter Thread starter Kayman
  • Start date Start date
K

Kayman

Hello;

I am in the progress preparing my pc for installing IE7.
---
In Add-ons that have been used by Internet Explorer (IE6):
Name: Accu Class
Status: Enabled
Type: ActiveX control
File: ACCU~15.DLL
---
I conducted a thorough check with respect to viruses, malware and other
pests.
Scanned in normal and/or safe mode (where applicable) with CA Anti-Virus,
Ad-Aware, Spybot S&D, SuperAntiSpyware, Windows Defender, Ewido
Anti-Spyware, A squared Malware Scanner, David Lipman's MULTI_AV,
RootkitRevealer and HijackThis.

According to the scan results my system appears to be clean.
--
In RegSeeker v1.52 I found some additional information:

HKEY_CLASSES_ROOT
CLSID\{5DA14B0D-28BF-11D5-BA4C-00C04F3238A9}\InprocServer32
ab(default) D:'ACCUC~15.DLL
and
HKEY_CLASSES_ROOT
CLSID\{5DA14B0D-28BF-11D5-BA4C-00C04F3238A9}\ToolboxBitmap32
ab (default) D:'ACCUC~15.DLL, 101
---
What is this add-on?
Google does not seem to have any pertinent info.
If this add-on is undesirable/malicious, where can I locate this file and/or
how can I remove this item for good?

I just can't find any further information as to whether or not this ActiveX
Control is 'friendly' and how it can be removed safely from the Manage
Add-ons panel.
--
http://msdn.microsoft.com/library/en-us/com/html/87b3d8e1-4d54-465c-9e5e-5e4f7391f313.asp?frame=true
and
http://msdn.microsoft.com/library/e...ee7-eaf30e54db8d.asp?frame=true#seeAlsoToggle
do not mention anything about Add-on's (i.e. ToolBoxBitmap32 or
InprocServer32).
 
Kayman said:
Hello;

I am in the progress preparing my pc for installing IE7.
---
In Add-ons that have been used by Internet Explorer (IE6):
Name: Accu Class
Status: Enabled
Type: ActiveX control
File: ACCU~15.DLL
---
I conducted a thorough check with respect to viruses, malware and other
pests.
Scanned in normal and/or safe mode (where applicable) with CA Anti-Virus,
Ad-Aware, Spybot S&D, SuperAntiSpyware, Windows Defender, Ewido
Anti-Spyware, A squared Malware Scanner, David Lipman's MULTI_AV,
RootkitRevealer and HijackThis.

According to the scan results my system appears to be clean.
--
In RegSeeker v1.52 I found some additional information:

HKEY_CLASSES_ROOT
CLSID\{5DA14B0D-28BF-11D5-BA4C-00C04F3238A9}\InprocServer32
ab(default) D:'ACCUC~15.DLL
and
HKEY_CLASSES_ROOT
CLSID\{5DA14B0D-28BF-11D5-BA4C-00C04F3238A9}\ToolboxBitmap32
ab (default) D:'ACCUC~15.DLL, 101
---
What is this add-on?
Google does not seem to have any pertinent info.
If this add-on is undesirable/malicious, where can I locate this file and/or
how can I remove this item for good?

I just can't find any further information as to whether or not this ActiveX
Control is 'friendly' and how it can be removed safely from the Manage
Add-ons panel.
--
http://msdn.microsoft.com/library/en-us/com/html/87b3d8e1-4d54-465c-9e5e-5e4f7391f313.asp?frame=true
and
http://msdn.microsoft.com/library/e...ee7-eaf30e54db8d.asp?frame=true#seeAlsoToggle
do not mention anything about Add-on's (i.e. ToolBoxBitmap32 or
InprocServer32).
Click to expand...

Can you send the file to me at samples AT superantispyware.com? I will
take a look.

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com
 
Thanks for speedy response, Nick.

You wrote:
"Can you send the file to me at samples AT superantispyware.com? I will take
a look."
 
Kayman said:
Thanks for speedy response, Nick.

You wrote:
"Can you send the file to me at samples AT superantispyware.com? I
will take a look."
---
I'd love to send you the file ACCU~15.DLL but am unable to locate it.
I checked in C:\WINDOWS\system and in ...system32 - no luck :(

Kind regards...................Kayman.
Click to expand...

accu~15.dll probabbly isn't the real name. search for accu*.dll
 
Dustbin said:
Idiot!
Click to expand...
Another one seduced by the mistress of knowledge ie arrogance.
Forgetting that one day long ago -they knew little & asked questions of
their own.
Sorcerer & apprentice also springs to mind.
 
Thanks Han.

You suggested:

"accu~15.dll probabbly isn't the real name. search for accu*.dll ".
---
Everything is A1 OK! I was able to find and delete this and a few other
'useless' add-ons.

IE7 is running like a charm :)

Cheers.....................Kayman.
 
Back
Top