Windows Tutorials - Herong's Tutorial Examples - v5.62, by Dr. Herong Yang
Spyware: SurfBuddy - sbuddy.dll
This section provides a tutorial example on remove spyware 'SurfBuddy' and related files sbuddy.dll.
Symptom: Unknown.
HijackThis Report: I ran HijackThis on my friend's system and saw this line:
O4 - HKLM\..\Run: [SurfBuddy] rundll32 "C:\Program Files\SurfBuddy\sbuddy.dll",run
Quick Research: I did a Google search on "SurfBuddy remove" and located the following related message from http://www.surfapps.com/sbuddydll.html:
"sbuddy.dll" is a spyware package currently circulating the internet. It was not developed and is not included with any surfapps.com software, and it is not part of surfapps.com's SurfBuddy Surf Companion software. Please view our Privacy Policy for more information about Surfapps.com's policies on spyware.
What I Did:
1. Looked at c:\program files\SurfBuddy, found the file, and failed to delete it directly:
>dir c:\program files\SurfBuddy sbuddy.dll ... >rmdir c:\program files\SurfBuddy sbuddy.dll in use
2. Run HijackThis > "Open the Misc Tools section" > "Delete a file on reboot", select c:\program files\SurfBuddy\sbuddy.dll, and reboot the system.
Result: SurfBuddy is gone.
Table of Contents
Introduction to Microsoft Windows
Introduction to Windows Explorer
Introduction to Internet Explorer
"Paint" Program and Computer Graphics
GIMP - GNU Image Manipulation Program
JPEG Image File Format Quality and Size
GIF Image File Format and Transparent Background
"WinZip" - ZIP File Compression Tool
"WinRAR" - RAR and ZIP File Compression Tool
FTP Server, Client and Commands
"FileZilla" - Free FTP Client and Server
Web Server Log Files and Analysis Tool - "Analog"
►Spyware Adware Detection and Removal
"HijackThis" - Spyware and Browser Hijacker Detector
"HijackThis" Report Entry Types
Spyware: WebBar - htwtb.bin and bar.dll
►Spyware: SurfBuddy - sbuddy.dll
Spyware: WebSpecials - webspec.dll
Spyware: DSSAgent - DSSAgent.exe
Transponder: Best Offer - farmmext.exe
IE Addon Program Listing and Removal
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
Spybot - Spyware Blocker, Detection and Removal
Setting Up and Using Crossover Cable Network
Home Network Gateway - DSL Modem/Wireless Router
Windows Task Manager - The System Performance Tool
"tasklist" Command Line Tool to List Process Information
"msconfig" - System Configuration Tool
Configuring and Managing System Services
Windows Registry Key and Value Management Tools