Remove SurfAssistant Toolbar

[Mr.ken]

At home we have a Xp computer. Today morning i saw a unwanted toolbar appears in Microsoft Internet Explorer while surfing.

When i asked someone he said its SurfAssistant and its a malware.
How can i remove it ?

Please help

[Expertz]

SurfAssistant is a toolbar that installs in Microsoft Internet Explorer as a Browser Helper Object (BHO). The SurfAssistant toolbar is dangerous malware / spyware, that is capable of any of the following:

• Logging keystrokes to steal password information for secure websites.
• Tracking your internet activity and passing this information to another site.
• Replacing ads in pages that you are viewing with other ads.

To completely purge SurfAssistant from your computer, you need to delete the files, folders, and Windows registry keys, and registry values associated with SurfAssistant. These files, folders, and registry keys are respectively listed in the Files, Folders, Registry Keys, and Registry Values sections on this page.To delete SurfAssistant, follow this steps:-

1. Using your file explorer, browse to each file and folder listed in the Folders and Files sections.
   
   
2. Select the file or folder and press SHIFT+Delete on the keyboard.
   
   
3. Click Yes in the confirm deletion dialog box.

[need Tos]

Installing SurfAssistant is highly not recommended.As with many spyware applications, there are many components to this malware, and manual removal is difficult. Because many variants of the malware appear over time, the exact removal method may vary from one infestation to another.

To automatically remove SurfAssistant Toolbar and clean your computer of all other spyware, use a reliable anti-spyware product like Spyware Doctor.

[Gusgr8]

You can try this as well:-

1. Kill the following processes

atct.exe, elahwrcf.exe, etyxkr.exe, evgnin.exe, fov.exe, ihglcl.exe, jon.exe, mrqt.exe, nknqzkt.exe, pixut.exe, tsr.exe, xgf.exe


2. Unregister the following DLLs and reboot

saiemod.dll in Windows\system32\
saiemod.dll in Windows\system\


3. Remove the following files

yvon's training.lnk in Favorites\adult sites\hardcore\
atct.exe, elahwrcf.exe, etyxkr.exe, evgnin.exe, fov.exe, ihglcl.exe, jon.exe, mrqt.exe, nknqzkt.exe, pixut.exe, tsr.exe, xgf.exe in Windows\
saiemod.dll in Windows\system32\
saiemod.dll in Windows\system\

4. Delete these registry entries

HKEY_CLASSES_ROOT\clsid\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_LOCAL_MACHINE\software\classes\clsid\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\atct
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\elahwrcf
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\etyxkr
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\evgnin
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\fov
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ihglcl
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\jon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\mrqt
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\nknqzkt
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\pixut
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\tsr
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\xgf