Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


*Spyware - Dyfuca*

  • Please log in to reply
1 reply to this topic

#1 Chester71


  • Members
  • 5 posts
  • Local time:11:14 PM

Posted 16 August 2005 - 02:16 PM

Could anyone help me?

The event occurred when was restarting my pc.
Zone Alarm Scan showed that a Money Tree-NSUpdate was found. Also, Zone Alarm Scan explained that Money Tree is a broser plugin that works as a ActiveX control used to download premium-rate dialers, generally for porn web-sites. It also installs dyfuca.ocx and dyfuca.inf in the downloaded program files folder. This variant also installs nsupdate.dll and dsupd9x.inf.
I had already used both Ad-AwareSE and Spybot.
NOTE that both, Spybot and AdAware did not find "Money Tree".
What should I do? Thanks in advance.


BC AdBot (Login to Remove)


#2 Daisuke


    Cleaner on Duty

  • Members
  • 5,575 posts
  • Gender:Male
  • Location:Romania
  • Local time:11:14 PM

Posted 20 August 2005 - 04:31 AM


Download here HJT 1.99.1. Save it on your Desktop. You will need now to unzip hijackthis.exe to a permanent folder, such as c:\hjt . This has to be done as HijackThis creates backups. You may need to use these backups.

First create a new folder:
A. Click My Computer icon on your desktop
B. Click C: drive
C. Click the File menu --> New --> Folder, a folder "New folder" will be created.
D. Rename it HJT

Unzip hijackthis.exe to the c:\HJT folder.

Double-click on hijackthis.exe and when the window opens, put a checkmark in the box at the bottom that states Don't show this frame again when I start HijackThis.

Then click on the button labeled None of the above, just start the program. You will now be presented with the main HJT screen.
Press the Scan button and then when it is done, the Save Log button. Save this log on your desktiop, and then copy and paste the contents of the notepad it opens as a reply to this post.
Everyday is virus day. Do you know where your recovery CDs are ?
Did you create them yet ?

Posted Image

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users