This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.
Based on the settings of your F-Secure security product, it may block the file from running, move it to the quarantine where it cannot spread or cause harm, or ask you to select an action.
A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:
Check for the latest database updates
First check if your F-Secure security program is using the latest updates, then try scanning the file again.
Submit a sample
After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.
Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.
Exclude a file from further scanning
If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.
Note: You need administrative rights to change the settings.
The online installer for the DuDu Accelerator is a downloader agent, retrieving its setup binary installer from a remote site. An adware program may be bundled with the DuDu accelerator installer. Alternatively, some installers retrieve a second installer, which delivers the adware program to the system.
The adware program may be known by a variety of names, such as Desktop-Media and IE-Bar.
When the retrieved DUDU Accelerator installer is dropped onto the system and executed by a freeware or shareware application, the following files are dropped:
Where %UserProfile% refers to the current user's profile folder, the default installation pathway being "C:\Documents and Settings\[CURRENT USER]" (Windows NT/2000/XP).
In addition, the following file is dropped:
Where %WINDIR%refers to the Windows folder, the default installation pathway being "C:\Windows" (Windows 95/98/Me/XP) or "C:\Winnt" (Windows NT/2000).
This installer will then install the DuDu Accelerator program, with the extra adware program, by dropping the following files:
Where %ProgramFiles% refers to the program files directory, the default installation pathway being "c:\Program Files";&%AdwareProgramFolder% refers to the program folder used by the adware; and %Version% refers to the folder where it signifies the program version (usually in a 4 digit, 1.2.3.4 format)&
Some of these binary files are also being detected as Adware.Win32.Dm
Where %AllUsersProfile% refers to the all user's profile folder, the default installation pathway being "C:\Documents and Settings\All Users" (Windows NT/2000/XP).
During installation, the program creates the following key:
The adware program may contact to the remote site dmcast.com to retrieve a random advertisement. It may also checkyahoo.com.cn to confirm if it is connected to the internet.
Creates these keys: