PurityScan.ndrv

Overview

PestPatrol and ComputerCops report that NDrv.dll is a PurityScan variant, implemented as a browser helper object along with a standard .exe application, NDrv.exe, that runs at startup.

PurityScan.ndrv is often spotted togther with DrummerBoy and other PurityScan variants.

PurityScan.ndrv is mentioned at the security forums where its removal is recommended [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13].

Classification

Unknown

Variants

PurityScan  PurityScan.b  PurityScan.c  PurityScan.ndrv  PurityScan.wcpt  PurityScan.wtsc  PurityScan.wtss 

Files

NDrv.exe, NDrv.dll

If you have any of the files related to PurityScan.ndrv on your system, please send them for additional analysis. Generally, I have only analysed a few versions for each software component listed at this web site. With your help I will be able to look at both old and more recent versions of the PurityScan.ndrv software. Thank you very much for your time!

Log references

Log 695

Vendor

Purityscan.com whois_cache whois
Puritysweep.com whois_cache whois
Click Spring, LLC whois_cache whois

End User License Agreement

2004-03-21

Detection

Bazooka Adware and Spyware Scanner detects PurityScan.ndrv. Bazooka is freeware and detects spyware, adware, foistware, trojan horses, viruses, worms and other potentially unwanted applications. Read more »

Uninstall procedure

Please read the uninstall instructions from the vendor.

Uninstall PurityScan.ndrv with FreeFixer

I'm working on a general purpose tool for removing unwanted software. The tool is called FreeFixer and can help you remove unwanted Browser Helper Objects, Internet Explorer toolbars and software that starts automatically when you reboot your computer, so it can offer some assistance while uninstalling PurityScan.ndrv. The manual removal instructions listed below will help you to identify what to delete with FreeFixer.

Read more about FreeFixer.

Manual removal

Please follow the instructions below if you would like to remove PurityScan.ndrv manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If PurityScan.ndrv remains on your system after stepping through the removal instructions, please double-check by stepping through them again.

1. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
2. Browse to the key:
   'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
3. In the right pane, look value called 'NDrv', if it exists.
4. Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ {A78CC2FF-6E4E-4556-B27C-D7C3A70D7A50}', if it exists.
5. Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ {A78CC2FF-6E4E-4556-B27C-D7C3A70D7A50}', if it exists.
6. Exit the registry editor.
7. Restart your computer.
8. Start Windows Explorer and delete:
   %SystemDir%\NDrv.exe
   %SystemDir%\NDrv.dll
   Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

Problems uninstalling? Click here.

I'm looking for your help!

Thank you for using my site, I hope you find it useful. I'm looking for help from all users, please read more.

Contact information for PurityScan.ndrv's vendor

In order to provide correct, accurate and updated information about PurityScan.ndrv I encourage the vendor to contact me if any part of this write-up needs a revision.