| DyFuCA.Internet Optimizer removal| Spyware DyFuCA.Internet Optimizer Information |
|---|
Name: DyFuCA.Internet Optimizer
Category: Browser Helper Object
Date: 2005-07-08
Coded in: Visual C
Dangerous: Yes |
Dyfuca Internet Optimizer is an Internet Explorer error page hijacker. It is usually installed by malware worms such as Moneytree. Moneytree is an ActiveX Control Object used to download malware such as dialers or adware.
>> Delete DyFuCA.Internet Optimizer automatically - Download Spyware Doctor
| DyFuCA.Internet Optimizer Removal Instructions |
|---|
Kill the following processes actalert.exe, bcuyfz.exe, optimize.exe, optimize[1].exe, optimize314.exe, install.exe, msbb.exe, msbb.exe, install.exe, optimize.exe, optimize313.exe, rogue.exe, 180ax.exe, ixizgfcp.exe, saie.exe, optimize.exe | Unregister the following DLLs and reboot nem218.dll.
msbbhook.dll in Documents and Settings\UserName\local settings\temp\
ncmyb.dll in Program Files\internet optimizer\sim\
180axhook.dll, ncmyb.dll, nem216.dll, nem220.dll in Windows\
saiehook.dll in Windows\system32\
nem220.dll in Windows\windows\
| Delete these registry entries HKEY_CLASSES_ROOT\clsid\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\clsid\{8f4e5661-f99e-4b3e-8d85-0ea71c0748e4}
HKEY_CLASSES_ROOT\clsid\{cea206e8-8057-4a04-ace9-ff0d69a92297}
HKEY_CLASSES_ROOT\clsid\{f7f808f0-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj.1\clsid\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj\clsid\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\typelib\{40b1d454-9ca4-43cc-86aa-cb175eac52fb}
HKEY_CLASSES_ROOT\typelib\{58634367-d62b-4c2c-86be-5aac45cdb671}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\internet optimizer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f7f808f0-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\180ax
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\internet optimizer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ixizgfcp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\media access
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\msbb
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\saie
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\a95kfrhe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\kapabout
| Remove the following files actalert.exe, bcuyfz.exe, nem218.dll, optimize.vexe, optimize314.exe, rogue.exe.
optimize.exe in c:\temp\
optimize[1].exe in Desktop\
msbbhook.dll in Documents and Settings\UserName\local settings\temp\
install.exe in Program Files\internet optimizer\
msbb.exe, ncmyb.dll in Program Files\internet optimizer\sim\
msbb.exe in Program Files\internet optimizer\sim\fleok\
install.exe, optimize.exe, optimize313.exe in Program Files\internet optimizer\update\
180ax.exe, 180axhook.dll, ixizgfcp.exe, ncmyb.dll, nem216.dll, nem220.dll in Windows\
saie.exe, saiehook.dll in Windows\system32\
optimize.exe in Windows\temp\
nem220.dll in Windows\windows\
| Remove the following directories Program Files\internet optimizer
Program Files\internet optimizer\update
|
Bookmark DyFuCA.Internet Optimizer page
|