AdSubscribe.dll is adware


This is a harmful program.

remove It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program.
If that does not help, then ask us for help in the Spyware removal forum.

Name: AdSubscribe
Filename: AdSubscribe.dll
Registry key:

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AdSubscribe
HKEY_CLASSES_ROOT\CLSID\{82C885EE-6B87-4D51-9EF4-0CFE9FADA900}

Command: shelliconoverlayidentifiers
CLSID: clsid
Startup Type:
Combofix/RSIT Line:

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AdSubscribe]
@=”{82C885EE-6B87-4D51-9EF4-0CFE9FADA900}”
[HKEY_CLASSES_ROOT\CLSID\{82C885EE-6B87-4D51-9EF4-0CFE9FADA900}]
2009-06-23 21:11 750080 —-a-w- c:\documents and settings\user\Application Data\AdSubscribe\AdSubscribe.dll
2009-06-23 21:11 . 2009-06-23 21:11 ——– d—–w- c:\documents and settings\user\Application Data\AdSubscribe
2009-06-23 21:11 . 2009-06-23 21:11 807424 —-a-w- c:\documents and settings\user\Application Data\AdSubscribe\Uninstall.exe
2009-06-23 21:11 . 2009-06-23 21:11 750080 —-a-w- c:\documents and settings\user\Application Data\AdSubscribe\AdSubscribe.dll

Description: adware also known as AdWare.FearAds, Trojan-Downloader.Win32.Adload.fib, Worm.Win32.Malware.gen

How to remove: ask help at Spyware removal forum.

This entry was posted on Saturday, June 27th, 2009 at 9:55 pm and is filed under adware, ShellIconOverlayIdentifiers. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “AdSubscribe.dll is adware”

  1. admin Says:
    July 4th, 2009 at 2:07 am

    AdSubscribe removal instructions
    Download Avenger from here and unzip to your desktop.
    Run Avenger, copy,then paste the following text in Input script Box:

    Registry keys to delete:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}
    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AdSubscribe

    Folders to delete:
    %appdata%\FieryAds
    %appdata%\AdSubscribe

    Then click on ‘Execute’.
    You will be asked Are you sure you want to execute the current script?. Click Yes.
    You will now be asked First step completed — The Avenger has been successfully set up to run on next boot. Reboot now?. Click Yes.
    Your PC will now be rebooted.

  2. Zeno Davatz Says:
    July 9th, 2009 at 2:24 am

    Ok, I am very curious if this worked for me!

  3. lba ben Says:
    July 9th, 2009 at 6:27 am

    thanks all

Leave a Reply