DelfinProject Description:
Also known as: PromulGate, Adware.DelFin.B
DelfinProject uses pcsvc.exe, a media viewer to monitor user browsing habits and then sends the data back to the author's server for analysis.
DelfinProject Automatic Removal:
Using Spyware Doctor to remove DelfinProject AUTOMATICALLY!
Sponsored Links:
DelfinProject Manual Removal:
Warning:
The following instructions are only for advanced
computer users. We recommend you to backup your
system registry or create a System Restore Point
before any risky step. We offers no warranty of
any kind to manual operators. For common users we
recommend to remove malwares using anti-spyware
tools, such as Spyware Doctor,
Spyware Doctor, BPS
Spyware&Adware Remover, ...
To uninstall DelfinProject:
- Press ctrl+alt+del, terminate these process from the Tasklist:
63mm.exe
adl_mteststub.exe
wtsdfi.exe
mm15201518.stub.exe
nsvsvc.exe
picsvr.exe
dpi.exe
pgmonitr.exe
srtin.exe
pcsvc.exe
vmss.exe
wsxsvc.exe
uppicsvr.exe
vidctrl.exe
winproc32.exe
- Click Start > Run. Type
REGSVR32 -u %Dll_name%. Then click OK. Replace %Dll_name% with followings:
nsvs.dll
programfilesdir+\delfin\pgsdk.dll
programfilesdir+\delfin\pgvalidator.dll
programfilesdir+\delfin\promulgate\pgsdk.dll
systemroot+\system32\delfin.dll
systemroot+\system32\pcs\init.dll
systemroot+\system32\pcs\pcsvc.dll
systemroot+\windows\system32\wsxsvc\wsx.dll
- Click Start > Run. Type regedit.
Then
click OK.
Navigate to and delete the registry keys:
HKEY_CLASSES_ROOT\clsid\{a8bd9566-9895-4fa3-918d-a51d4cd15865}
HKEY_CLASSES_ROOT\clsid\{a8bd9566-9895-4fa3-918d-a51d4cd15865}\pgdataaccess property page
HKEY_CLASSES_ROOT\clsid\{d0070620-1e72-42e7-a14c-3a255ad31839}
HKEY_CLASSES_ROOT\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610}\_dpgdataaccessevents
HKEY_CLASSES_ROOT\interface\{41700749-a109-4254-af13-be54011e8783}\_dpgdataaccess
HKEY_CLASSES_ROOT\vccpgdataaccess.pgdataaccessctrl.1
HKEY_LOCAL_MACHINE\software\classes\clsid\{a8bd9566-9895-4fa3-918d-a51d4cd15865}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d0070620-1e72-42e7-a14c-3a255ad31839}
HKEY_LOCAL_MACHINE\software\classes\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610}
HKEY_LOCAL_MACHINE\software\classes\interface\{41700749-a109-4254-af13-be54011e8783}
HKEY_LOCAL_MACHINE\software\classes\typelib\{2a7db8d1-43be-4ad3-a81e-9bb8c9d00073}
HKEY_LOCAL_MACHINE\software\classes\vccpgdataaccess.pgdataaccessctrl.1
HKEY_LOCAL_MACHINE\software\dpi\item1
HKEY_LOCAL_MACHINE\software\dpi\item2
HKEY_LOCAL_MACHINE\software\pcsv
HKEY_LOCAL_MACHINE\software\tat
HKEY_LOCAL_MACHINE\software\vidctrl
and remove the registry value:dpi, dvx, pcsv, promulgate, vidctrl in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Exit the Registry Editor.
- Remove these directories in Explorer:
profilepath+\application data\vmss
profilepath+\application data\wsxs
profilepath+\local settings\temp\vmstmp
programfilesdir+\common files\dpi
programfilesdir+\delfin
systemroot+\system32\wsxsvc
However, a few of registry entries
may be left
behind deleting. You can ask for Spyware Doctor to clean up.
More
Removal Instructions for Emerging Adware Spyware
|