Tech: 'Download accelerator has added the link

Subject: Tech: 'Download accelerator has added the link
From: 8_Pints
Date: 14 Dec 04 - 12:22 PM

My son installed a 'download accelerator' to our Win'98 PC some while back that we have been trying to uninstall ever since.

There is an 'Experts' web-page that claims it can remove it provided I subscribe a recurring monthly/annual subscription using my credit card.

I don't have much confidence in this, but would welcome any other suggestions.

Bob vG

Subject: RE: Tech: 'Download accelerator has added the link
From: MMario
Date: 14 Dec 04 - 12:55 PM

try the latest ad-aware. or spybot-search and destroy.

Subject: RE: Tech: 'Download accelerator has added the link
From: Geoff the Duck
Date: 14 Dec 04 - 04:48 PM

I echo the above advice. It is suspicious that something you don't want on your computer advertises a "removal tool" which you then have to pay for. Sounds like extortion to me....!

For very effective FREE solutions to the Scum Merchants try these! It ois worth running both of them as they have a slightly different agenda for what they protect you from.

Spybot
Ad-Aware.

Quack!!
Geoff.

Subject: RE: Tech: 'Download accelerator has added the link
From: Cluin
Date: 14 Dec 04 - 05:13 PM

Do NOT give them your credit card number, Bob! That'd definitely be out of the frying pan and into the fire, or at the very least, into the fire. Try SpyBot S&D, Ad-Aware, and CWShredder and HIJackThis to uninstall your Download Accelerator.

Subject: RE: Tech: 'Download accelerator has added the link
From: Peace
Date: 14 Dec 04 - 07:02 PM

Sounds like a scam to me.

Don't give out your credit card number unless you're VERY rich and you don't mind changing that financial status VERY quickly.

Subject: RE: Tech: 'Download accelerator has added the link
From: Q (Frank Staplin)
Date: 14 Dec 04 - 08:17 PM

I suckered for one of these. Not an accelerator but it promised to stop pop-ups. It did, but substituted its own garbage. Thanks to recommendations from Mudcatters like those posting above, I got Spyware Doctor and they took care of it. I took their full version and I do pay them a yearly fee, but it is small and they update very frequently.

Subject: RE: Tech: 'Download accelerator has added the link
From: 8_Pints
Date: 15 Dec 04 - 08:47 AM

I already have Webroot Spy Sweeper installed byt this does not detect anything amiss.

I suspect that as the 'Download accelerator' was installed legitimately it might not consider this to be 'malware'.

The basic problem is that I cannot find any reference for it to permit the 'Settings/Control Panel/Add or Remove Programs' feature to include it in the drop down list that can then be used to get rid of it.

I have also run 'Registry Mechanic' and this has not highlighted its presence either.

Will now run Registry Edit to see if it is lurking anywhere.

Bob vG

Subject: RE: Tech: 'Download accelerator has added the link
From: JohnInKansas
Date: 15 Dec 04 - 10:10 AM

There are quite a number of "Download Accelerators" in circulation, so you'll need to identify your specific little jewel if you want to attempt a manual removal. To give you an idea of what's out there, the following links will give you brief summaries, all from PestPatrol, of a half-dozen varieties.

1. eTrust PestPatrol: ClearStream Accelerator

2. eTrust PestPatrol: ClearStream Accelerator a.k.a. X10 Adware Clear Stream

3. eTrust PestPatrol: IMSI Net Accelerator 3.0 Possibly a legitimate product?

4. eTrust PestPatrol: WebDownloader by FC a.k.a. IRC-Worm.Momma, TrojanDownloader.Win32.WebDL.03, TrojanDownloader.Win32.WebDL.a, TrojanDownloader.Win32.WebDL.c, TrojanDownloader.Win32.WebDL.d

5. eTrust PestPatrol: Webdownloader Phrostic 1.0 a.k.a. TrojanDownloader.Win32.Phrostic

6. eTrust PestPatrol: WebRSH 1.0.1b a.k.a.

The common varieties at this site are in three general categories:
BHO = Browser Helper Objects
Downloaders = programs designed to connect you to, and download from, some site.
RAT = Remote Administration Tool

From 1. above:

***
Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.
***

From 4. above:

***
Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.
***


From 6. above:

***
RAT: A Remote Administration Tool, or RAT, is a Trojan that when run, provides an attacker with the capability of remotely controlling a machine via a ""client"" in the attacker's machine, and a ""server"" in the victim's machine. Examples include Back Orifice, NetBus, SubSeven, and Hack'a'tack. What happens when a server is installed in a victim's machine depends on the capabilities of the trojan, the interests of the attacker, and whether or not control of the server is ever gained by another attacker -- who might have entirely different interests. Infections by remote administration Trojans on Windows machines are becoming as frequent as viruses. One common vector is through File and Print Sharing, when home users inadvertently open up their system to the rest of the world. If an attacker has access to the hard-drive, he/she can place the trojan in the startup folder. This will run the trojan the next time the user logs in. Another common vector is when the attacker simply e-mails the trojan to the user along with a social engineering hack that convinces the user to run it against their better judgment.
***

Note that all of these "methods" provide a way for someone remote from your computer to connect to a site that they choose, and to download anything they choose to your machine. You have NO CONTROL over, and in most cases will not be told about it, if and when they decide to put something on your machine.

Any of these "methods" can install Adware and/or Toolbars on your machine, although those are two of the less objectionable things they can do. The following definitions are also from 1. above.

****
Adware: Software that brings ads to your computer. Such ads may or may not be targeted, but are "injected" and/or popup, and are not displayed within the form of an ad-sponsored application. Some Adware may hijack the ads of other companies, replacing them with its own. See also Spyware, Browser Helper Object.

Toolbar: A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.
****

Note that there are legitimate "Download Managers" that may be referred to as "Accelerators." If you don't have a definite use/need for one, I'd recommend not leaving one laying around on your machine.

PestPatrol claims to be able to remove any of the cited programs. Manual removal instructions are given for a couple of them, and will give you an idea of what you might be facing. The instructions for manual removal are specific to the programs they're listed with, so you can't just follow them for another program.

I don't have any direct experience with PestPatrol, and this is NOT A RECOMMENDATION for or against it. It is one of several "detection and removal" programs that have been listed by reputable sources but you'll have to do your own research to see whether it will help with your specific problem. There are a number of other such programs available.

My only reason for linking the PestPatrol site is that it had summaries of "typical" junk in the common categories all in one place.

John

Subject: RE: Tech: 'Download accelerator has added the link
From: Cluin
Date: 15 Dec 04 - 06:19 PM

I'm glad you're around here, JIK. Good advice, computech-wise, is always welcome.

Subject: RE: Tech: 'Download accelerator has added the link
From: 8_Pints
Date: 18 Dec 04 - 01:35 PM

Problem solved!

DAP Removal Utility select fourth hypertext link and double click to remove offending components.

Reboot and launch Netscape Navigator 7.1, then use menu 'Edit/Preferences/Navigator/Downloads' entries and use radio buttons to deselect 'Download Manager' option.

Result: downloads now performed successfully without DAP failure messages.

Thanks to all for contributions above.

Merry Christmas & Happy New Year!

Bob vG