spyware removal instructions

DyFuCA removal

Spyware DyFuCA Information
Name: DyFuCA
Category: Browser Helper Object
Date: 2005-05-28
Dangerous: Yes
DyFuCA is an adult site dialer. It works as a browser helper object, once installed it will launch a bunch of adult themed pop-up windows with every Internet Explorer spawn and also it will try to dial to its adult-website service to pay an entrance fee.
>> Delete DyFuCA automatically - Download Spyware Doctor

DyFuCA Removal Instructions
Kill the following processes
actalert.exe, setup.exe, goldentiger.exe, idctup20.exe, optimize.exe, ssupdate.exe, preinstt.exe, update.exe
Unregister the following DLLs and reboot
nem220.dll, wsem218.dll, wsem302.dll, wsem303.dll.
nem214.dll, nem219.dll, wsem216.dll in Windows\
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{d8e25c53-9508-4f5c-9249-d98d438891d5}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj
HKEY_CLASSES_ROOT\dyfuca_bh.sinkobj
HKEY_CLASSES_ROOT\interface\{1c01d150-91a4-4de0-9bf8-a35d1bdf1001}
HKEY_CLASSES_ROOT\safesurfinghelper.iebho
HKEY_CLASSES_ROOT\typelib\{00211813-6223-4c6a-be8d-4d2676cd1361}
HKEY_CURRENT_USER\software\avenue media
HKEY_CURRENT_USER\software\policies\avenue media
HKEY_LOCAL_MACHINE\software\avenue media
HKEY_LOCAL_MACHINE\software\fci
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\safesurfingupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dyfuca
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\internet optimizer
HKEY_LOCAL_MACHINE\software\safesurfing\update
Remove the following files
actalert.exe, goldentiger.exe, idctup20.exe, nem220.dll, optimize.exe, update.exe, wsem218.dll, wsem302.dll, wsem303.dll.
setup.exe in c:\spedia\
nem214.dll, nem219.dll, wsem216.dll in Windows\
ssupdate.exe in Windows\system32\
preinstt.exe in Windows\temp\thi6026.tmp\

Bookmark DyFuCA page

 Previous Spyware: Remove Dy.257 Next Spyware: Remove DyFuCA.Internet Optimizer