DuDuAccelerator is an adware program that monitors user Internet activity, checks web browser cookies and displays undesirable commercial advertisements while surfing the web. The threat is able to bypass Windows firewall. DuDuAccelerator is bundled with some ad-supported products. It can also be manually installed. The threat works as a web browser add-on and therefore runs every time the user launches Internet Explorer.
duduacc.exeduduproc.exeduduprosvc.exerep.exe
ddddl.dlldddiemon.dlldddmext.dlldddskin.dllmbprot.dllrsen.dll
HKEY_CLASSES_ROOTdddiemon.DDDMonHKEY_CLASSES_ROOTdddiemon.DDDMon.1HKEY_CLASSES_ROOTdddiemon.CustomDownloadMgrHKEY_CLASSES_ROOTdddiemon.CustomDownloadMgr.1HKEY_CLASSES_ROOTdddspocx.SpocxHKEY_CLASSES_ROOTdddspocx.Spocx.1HKEY_CLASSES_ROOTCLSID{6BDE1669-B490-48E3-B668-456314F2D6C3}HKEY_CLASSES_ROOTCLSID{8135EF31-FE8C-4C6E-A18A-F59944C3A488}HKEY_CLASSES_ROOTCLSID{FFD95F65-F5E4-4AB8-B7F9-F61F13878A04}HKEY_CLASSES_ROOTInterface{2F3482F8-819F-49BC-A272-C91FE2605F45}HKEY_CLASSES_ROOTInterface{7B242FAA-D828-4492-8223-B543F17DF940}HKEY_CLASSES_ROOTInterface{899A0B96-1BAB-4D7C-B88A-107F38805D3E}HKEY_CLASSES_ROOTTypeLib{49BD048A-3EBA-4234-A408-DF92AD121FD8}HKEY_CLASSES_ROOTTypeLib{A088BCC7-7E07-424B-B46D-A84C6F5BA3BC}HKEY_LOCAL_MACHINESOFTWAREDuduHKEY_LOCAL_MACHINESOFTWAREClasses.dd!HKEY_LOCAL_MACHINESOFTWAREClassesddd.dd!HKEY_LOCAL_MACHINESOFTWAREClassesdddmext.dlmgrHKEY_LOCAL_MACHINESOFTWAREClassesdddmext.dlmgr.1HKEY_LOCAL_MACHINESOFTWAREClassesMbProt.MbPlugProtHKEY_LOCAL_MACHINESOFTWAREClassesMbProt.MbPlugProt.1HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{915E63F4-4733-401E-8556-6559B30A4C5A}HKEY_LOCAL_MACHINESOFTWAREClassesMIMEDatabaseContent Typeapplication/x-dddHKEY_LOCAL_MACHINESOFTWAREClassesProtocolsHandlerkobooHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{6BDE1669-B490-48E3-B668-456314F2D6C3}HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerExtensions{3DB9F45E-AA74-4373-A466-C18A9F1C500D}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDLLspercentSystempercentmbprot.dllHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesDuDuDddClientdudurrosvc.exeHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesDuDuDddClientduduacc.exeHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesDuDuDddClientdudupros.exeHKEY_LOCAL_MACHINESystemCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsListC:Program FilesDuDuDddClientep.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerDownloadUI={FFD95F65-F5E4-4AB8-B7F9-F61F13878A04}HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownloadUI={FFD95F65-F5E4-4AB8-B7F9-F61F13878A04}