arupdate.exe - Dangerous
arupdate.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
In some circumstances, you may see the message:
This module was compiled with a trial version of Delphi. The trial period has expired.
If the file Cpr.dll is found in the System folder this mean you are infected.
This adware must be manually installed or installed as a component of another program.
Creates the following registry keys:
HKEY_CLASSES_ROOT\cpr.IEHelperOP
HKEY_CLASSES_ROOT\CLSID\{FAC6E0E1-5D45-4907-BC00-302D702DCC73}
HKEY_CURRENT_USER\Software\Cpr
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CPR
Periodically contacts iads.adroar.com to download advertisements.
May download and install updated versions of itself.
This threat can be detected only by Symantec products that support expanded threats.
Use RegRun Start Control to remove arupdate.exe and cpr.dll.