Remove SafeSurfing

SafeSurfing Description

SafeSurfing is a spyware application. Once installed on your system, it will start every time you login to Windows, and will bypass the Windows Firewall. The program will send information on your computer and browsing habits to its parent servers.

Remove SafeSurfing

Stop the following SafeSurfing processes:
asbltzun.exe
netsync.exe
regsync.exe
richup.exe
installerv3.exe
UnIrimon.exe

Remove the following SafeSurfing registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
egsync
ichup
sync
HKEY_CLASSES_ROOTLowSol.RichEditor
HKEY_CLASSES_ROOTLowSol.RichEditor.1
HKEY_CLASSES_ROOTVar3.RsyncHlpr.1
HKEY_CLASSES_ROOTVBRun.VBRunDLL
HKEY_CLASSES_ROOTVBRun.VBRunDLL.1
16B238D5-80DE-47CE-8F17-B3ECE2C2248D
197B8CA4-E215-46DD-8F33-E0544A80E5C4
F79A2C4B-8776-4ED7-8B2F-4786A4A3500A
0A0CB91F-304B-44AD-9460-9C55465163A4
32A9D21F-F510-44DC-9EA6-0456EDA04668
4562B6F3-DAF8-464E-87B7-5464575F0D6A
57CB9B97-9FF9-4C87-88A4-56A867FFC95E
DA4B919F-B757-4E32-8D79-DEC5C2704C4B
F1AD96E6-E575-44D9-9BBF-F3FDCF06C454
00DC9FF2-EA77-49C7-8DEF-722FD81CAB59
227D1E33-EAD4-4ACE-BE32-4ACFAAD072DD
33ADD70F-53AB-4F97-B4B6-997881820F6D
HKEY_LOCAL_MACHINESOFTWARESafeSurfing
HKEY_LOCAL_MACHINESOFTWARERichEd
HKEY_LOCAL_MACHINESOFTWARERSyncMon
HKEY_LOCAL_MACHINESOFTWAREVBRun
etsync
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPaths
ichedtr
syncmon
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionAppPathsvbrundll
etsync.exe
HKEY_LOCAL_MACHINESYSTEMServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList
egsync.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRichEditor
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRSyncMon
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallVBRunDLL
4865F155-CE00-4E93-A414-147844D7C81A
Cham2.RunBus
Cham2.RunBus.1
6833A8E2-A2A2-44F5-941B-85A95AFE35DE

Unregister the following SafeSurfing DLL files:
rsyncmon.dll
redtrsha.dll
richedtr.dll
vbrundll.dll
commcos2.dll

Delete the following SafeSurfing files:
asbltzun.exe
netsync.exe
regsync.exe
richup.exe
installerv3.exe
rsyncmon.dll
redtrsha.dll
richedtr.dll
vbrundll.dll
commcos2.dll
UnIrimon.exe

Other Spyware

0-9