Spyware Alert – CERES.DLL

Ceres.dll is a variant of a spyware program called "Transponder". This installs as a browser helper object. A file called buddy.exe may also install at the same time. Transponder tracks the URLs that you visit and the data you enter into web based forms. This variant establishes an SSL (secure socket layer) connection to the controlling server at vx2.cc, abetterinternet.com or msview.cc. From there it sends your personal information and can also download updates without your knowledge. It also generates popup ads.

We'd recommend removing this program using WinPatrol. First, go to your Active Tasks and kill any of these files that appear there: ceres.dll, buddy.exe, speer.dll, farmmext.exe, belt.exe, susp.exe, satmat.exe, alchem.exe, conscorr.exe, iehelper.dll, vx2.dll, tps108.dll, sitehlpr.dll, msview.dll, twaintec.dll, host.dll, bi.dll, mxtarget.dll, multimpp.dll, localnrd.dll, voiceip.dll, zserv.dll, btgrab.dll, ceres.dll, and speer.dll. Don't worry of all of these aren't found on your system. They install with different variants. Finally, go to your Startup Programs and remove the .exe files then go to your IE Helpers and remove the .dll files found there. If running WinPatrol 8.x or later, right click each file then select "Delete file on reboot" then reboot your system.

Additional background information and manual removal instructions at http://www.doxdesk.com/parasite/Transponder.html.

  • Spyware
  • Remove