Windows Tutorials - Herong's Tutorial Examples - Version 5.62, by Dr. Herong Yang
Spyware: SurfBuddy - sbuddy.dll
This section provides a tutorial example on remove spyware 'SurfBuddy' and related files sbuddy.dll.
HijackThis Report: I ran HijackThis on my friend's system and saw this line:
O4 - HKLM\..\Run: [SurfBuddy] rundll32 "C:\Program Files\SurfBuddy\sbuddy.dll",run
Quick Research: I did a Google search on "SurfBuddy remove" and located the following related message from http://www.surfapps.com/sbuddydll.html:
What I Did:
1. Looked at c:\program files\SurfBuddy, found the file, and failed to delete it directly:
>dir c:\program files\SurfBuddy sbuddy.dll ... >rmdir c:\program files\SurfBuddy sbuddy.dll in use
2. Run HijackThis > "Open the Misc Tools section" > "Delete a file on reboot", select c:\program files\SurfBuddy\sbuddy.dll, and reboot the system.
Result: SurfBuddy is gone.
Table of Contents