Home Spyware Database "SafeSurfing Removal Guide"

SafeSurfing Removal Guide

SafeSurfing Description

SafeSurfing Automatic Detection (Recommended)

Is your PC infected with SafeSurfing? To safely & quickly detect SafeSurfing, we highly recommend you...

Download SpyHunter's* Malware Scanner.

SafeSurfing Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove SafeSurfing Processes

Remove the "SafeSurfing" processes files:
UnIrimon.exe installerv3.exe richup.exe regsync.exe netsync.exe asbltzun.exe, netsync.exe, regsync.exe, richup.exe, installerv3.exeasbltzun.exe
Read more on How to kill SafeSurfing Processes

Step 2 : Use Registry Editor to Remove SafeSurfing Registry Values

Locate and delete "SafeSurfing" registry entries:
6833A8E2-A2A2-44F5-941B-85A95AFE35DE Cham2.RunBus.1 Cham2.RunBus 4865F155-CE00-4E93-A414-147844D7C81A HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallVBRunDLL HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRSyncMon HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRichEditor egsync.exe HKEY_LOCAL_MACHINESYSTEMServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList etsync.exe HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPathsvbrundll syncmon ichedtr HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPaths etsync HKEY_LOCAL_MACHINESOFTWAREVBRun HKEY_LOCAL_MACHINESOFTWARERSyncMon HKEY_LOCAL_MACHINESOFTWARERichEd HKEY_LOCAL_MACHINESOFTWARESafeSurfing 33ADD70F-53AB-4F97-B4B6-997881820F6D 227D1E33-EAD4-4ACE-BE32-4ACFAAD072DD 00DC9FF2-EA77-49C7-8DEF-722FD81CAB59 F1AD96E6-E575-44D9-9BBF-F3FDCF06C454 DA4B919F-B757-4E32-8D79-DEC5C2704C4B 57CB9B97-9FF9-4C87-88A4-56A867FFC95E 4562B6F3-DAF8-464E-87B7-5464575F0D6A 32A9D21F-F510-44DC-9EA6-0456EDA04668 0A0CB91F-304B-44AD-9460-9C55465163A4 F79A2C4B-8776-4ED7-8B2F-4786A4A3500A 197B8CA4-E215-46DD-8F33-E0544A80E5C4 16B238D5-80DE-47CE-8F17-B3ECE2C2248D HKEY_CLASSES_ROOTVBRun.VBRunDLL.1 HKEY_CLASSES_ROOTVBRun.VBRunDLL HKEY_CLASSES_ROOTVar3.RsyncHlpr.1 HKEY_CLASSES_ROOTLowSol.RichEditor.1 HKEY_CLASSES_ROOTLowSol.RichEditor sync ichup egsync HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstallVBRunDLLHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstallRSyncMon HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstallRichEditor HKEY_LOCAL_MACHINE SYSTEMServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList egsync.exe etsync.exe HKEY_LOCAL_MACHINE SYSTEMServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{197B8CA4-E215-46DD-8F33-E0544A80E5C4} HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{16B238D5-80DE-47CE-8F17-B3ECE2C2248D} HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Pathsvbrundll HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Paths syncmon HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Paths ichup HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Paths ichedtr HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Paths egsync etsync HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionApp Paths HKEY_LOCAL_MACHINE SOFTWAREVBRun HKEY_LOCAL_MACHINE SOFTWARERSyncMon HKEY_LOCAL_MACHINE SOFTWARERichEd HKEY_LOCAL_MACHINE SOFTWARESafeSurfing HKEY_CLASSES_ROOTTypeLib{33ADD70F-53AB-4F97-B4B6-997881820F6D} HKEY_CLASSES_ROOTTypeLib{227D1E33-EAD4-4ACE-BE32-4ACFAAD072DD} HKEY_CLASSES_ROOTTypeLib{00DC9FF2-EA77-49C7-8DEF-722FD81CAB59} HKEY_CLASSES_ROOTInterface{F1AD96E6-E575-44D9-9BBF-F3FDCF06C454} HKEY_CLASSES_ROOTInterface{DA4B919F-B757-4E32-8D79-DEC5C2704C4B} HKEY_CLASSES_ROOTInterface{57CB9B97-9FF9-4C87-88A4-56A867FFC95E} HKEY_CLASSES_ROOTInterface{4562B6F3-DAF8-464E-87B7-5464575F0D6A} HKEY_CLASSES_ROOTInterface{32A9D21F-F510-44DC-9EA6-0456EDA04668} HKEY_CLASSES_ROOTInterface{0A0CB91F-304B-44AD-9460-9C55465163A4} HKEY_CLASSES_ROOTCLSID{F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} HKEY_CLASSES_ROOTCLSID{197B8CA4-E215-46DD-8F33-E0544A80E5C4} HKEY_CLASSES_ROOTCLSID{16B238D5-80DE-47CE-8F17-B3ECE2C2248D} HKEY_CLASSES_ROOTVBRun.VBRunDLL.1 HKEY_CLASSES_ROOTVBRun.VBRunDLL HKEY_CLASSES_ROOTVar3.RsyncHlpr.1 HKEY_CLASSES_ROOTLowSol.RichEditor.1 HKEY_CLASSES_ROOTLowSol.RichEditor HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRun sync HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRun ichup HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRun egsync
Read more on How to Remove SafeSurfing Registry Entries

Step 3 : Use Windows Command Prompt to Unregister SafeSurfing DLL Files

Search and unregister "SafeSurfing" DLL files:
commcos2.dll vbrundll.dll richedtr.dll redtrsha.dll rsyncmon.dll
Read more on How to Remove SafeSurfing DLL Files

Step 4 : Detect and Delete Other SafeSurfing Files

Remove the "SafeSurfing" processes files:
UnIrimon.exe commcos2.dll vbrundll.dll richedtr.dll redtrsha.dll rsyncmon.dll installerv3.exe richup.exe regsync.exe netsync.exe asbltzun.exe asbltzun.exe, netsync.exe, regsync.exe, richup.exe, installerv3.exe, rsyncmon.dll, redtrsha.dll, richedtr.dll, vbrundll.dll, commcos2.dll
Read more on How to Delete Harmful Files

Back to Top

Site Disclaimer

Publication Date: Tue Mar 28 2006 12:19:23 EDT

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top