DyFuCA infection

[Maria]

I have Office Basic Edition 2003 on CD Rom. This has been working fine until
recently. Now I appear to have a macro/infection on Word (Excel etc; are
fine). A dialer called DyFuCA appears to be the problem and is detected by
Spyware Stormer but not by Norton Antivirus 2004 or SpyBot. Every time I try
to delete DyFuCA it wipes out Office and then when I try to use Word, Office
2003 has to download again from the Internet. Once it does DyFuCA is there.
I have checked that I am using Spyware Stormer correctly (I am NOT connected
to the Internet when I ask it to delete threats/infections). I have upgrade
to Windows XP Home Edition SP2 but this does not appear to have had any
effect. Macros are set at medium and Automatic Updates are allowed. Any
suggestions as to how I can permanently eradicate DyFuCA?

 

[lostinspace]

----- Original Message -----
From: "Maria" <>
Newsgroups: microsoft.public.word.docmanagement
Sent: Saturday, September 04, 2004 6:05 PM
Subject: DyFuCA infection

I have Office Basic Edition 2003 on CD Rom. This has been working fine
until
recently. Now I appear to have a macro/infection on Word (Excel etc; are
fine). A dialer called DyFuCA appears to be the problem and is detected
by
Spyware Stormer but not by Norton Antivirus 2004 or SpyBot. Every time I
try
to delete DyFuCA it wipes out Office and then when I try to use Word,
Office
2003 has to download again from the Internet. Once it does DyFuCA is
there.
I have checked that I am using Spyware Stormer correctly (I am NOT
connected
to the Internet when I ask it to delete threats/infections). I have
upgrade
to Windows XP Home Edition SP2 but this does not appear to have had any
effect. Macros are set at medium and Automatic Updates are allowed. Any
suggestions as to how I can permanently eradicate DyFuCA?

Manual removal
Please follow the instructions below if you would like to remove DyFuCA
manually. Please notice that you must follow the instructions very carefully
and delete everything that is mentioned. In most cases the removal will fail
if one single item is not deleted. If DyFuCA remains on your system after
stepping through the removal instructions, please double-check by stepping
through them again.

http://www.kephyr.com/spywarescanner/library/dyfuca/index.phtml
1.. Start the registry editor. This is done by clicking Start then Run.
(The Run dialog will appear.) Type regedit and click OK. (The registry
editor will open.)
2.. Delete HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \
{8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}, if it exists.
3.. Delete 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \
CurrentVersion \ Explorer \ Browser Helper Objects \
{8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}, if it exists.
4.. Exit the registry editor.
5.. Restart your computer.
6.. Delete Wsem*.dll, where * represents 3 random digits.
7.. Delete "c:\Programs Files\dialers\".
more returns from google:
http://www.google.com/search?hl=en&ie=UTF-8&q=+DyFuCA&btnG=Google+Search

 

[Maria]

Thank you. I went to the website you suggested. I followed your
instructions from that site to the letter. However, I do NOT have
{8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} anywhere on my system in the registry.
Neither do I have Wsem*dll or a C:\Programs Files\dialers\". Unless I am
very stupid or short sighted. Now what do I do? I tried a few other
websites recommended by Google, but none of their manual removals helped
either. I don't want to have to fork out yet more cash for another Spyware
system. Any further suggestions? Just to help, when I log on to the
Internet for the first time after Spyware Stormer has "deleted" DyFuCA a box
appears saying "Dowloading Microsoft Basic Office 2003" followed by another
which says "Configuring Microsoft Basic Office 2003". Hope someone can help.