Surfairy is an error page based Browser Hijacker adware program.  It was originally created by Divago in June of 2004.  Whenever a user enters an unused domain name or otherwise gets the 404 Error message, it redirects the user to www.divago.com.  It’s currently believed that Divago has gone defunct, since current redirections to that site lead to a 404 Error message.  It also prevents the user from printing a web page if they’re using Internet Explorer 6, Service Pack 1.

The original version of Surfairy (Surfairy/Hlp) is believed to be extinct, but there are apparently legacy versions of the updated version (Surfairy/PP) in the wild.  It can be transmitted from several advertising websites.  It also comes bundled in the new Packard Bell computers sold in Europe.

Surfairy is able to be removed with the Add/Remove Programs command.  However, the adware components are set to be reinstalled after rebooting the computer.  It is advised to remove this program with a spyware removal tool like SpyZooka.

Associated Files:

surfairypp.dll
HKEY_CURRENT_USERSoftwareSurfairy
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E0B9B5FE-B66E-4FB0-A1D9-726F0E743CFD}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E0B9B5FE-B66E-4FB0-A1D9-726F0E743CFD}