Surferbar is an
Internet Explorer toolbar that might be
associated with a new version of a trojan horse
program called AFlooder. It appears to be an
ActiveX drive-by download. The SurferBar is also
known as AdPlus/AdBar, it sets your homepage to
their website along with displaying popup ads.
Based upon visitors comments, I have added
information about a 2nd variation of surferbar
and instructions on removing it today - September
9, 2003.
Also known as: surferbar,
adplus, adbar, AFlooder, JunkSurf.A
SurferBar Automatic Removal:
Using Spyware Doctor
to detect and remove SurferBar AUTOMATICALLY!
Sponsored Links:
SurferBar Manual Removal:
Follow these steps
in removing the Surferbar toolbar. To complete
these steps you may have to Start in Safe Mode,
however by terminating the running program you
should be able to complete the steps normally.
1) Terminate the
running program
- Open the Windows
Task Manager by either pressing CTRL+ALT+DEL on
Win9x machines or CTL+Shift+Tab and clicking on
the Processes tab on WinNT/2000/XP machines.
- Locate the
following program, click on it and End Task or
End Process
winsrv32.exe
or
wins32.exe (2nd variation)
2) Remove the
Registry entries
- Click on Start,
Run, Regedit
- In the left panel
go to
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
- In the right
panel, right-click and delete the following
entry
- Close the
Registry Editor
3) Delete the
infected files (for Windows ME and
XP remember to
turn off System Restore before
searching for and deleting these files to remove
infected backed up files as well).
- Click Start,
point to Find or Search, and then click Files
or Folders.
- Make sure that
"Look in" is set to (C:\WINDOWS).
- In the "Named" or
"Search for..." box, type, or copy and paste,
the file names:
win32.dll (in the Program Files
directory)
winsrv32.exe (in the Program Files
directory)
drg.exe (in the root directory)
or
win32.dll (in the Program Files directory)
wins32.exe (in the Program Files directory)
sfbar.exe (in the root directory)
- Click Find Now or
Search Now.
- Delete the
displayed files.
4) Change your
default Internet home page in Internet Explorer:
- Open Internet
Explorer
- Click on Tools
- Click on Internet
Options
- Click in the
Homepage section and reset your homepage to
whatever page you would like
- Click OK
5) Open Regedit and
search for registry keys containing "surferbar",
"adplus", and "adbar", and delete these keys.
This should remove
SurferBar from your computer.
More
Removal Instructions for Adware/Spyware Programs -
'S'
(If you can not see the issued comment, please enable your browser to support javascript and refresh this page.)