nightowl
09-25-2004, 03:49 PM
Searchfind is easy to remove once you know what to look for. Below are 5 examples of Searchfind
1. Notice they are all O2 - BHO
2. Look at the CLSID number, The numbers are all different but they all have 2 things that look different than a regular CLSID number:
a. notice the LETTERS are all NON CAPS
Most CLSID Numbers are in CAPITAL LETTERS
b. Notice the file at the end begins with the Letter Q
Check out the examples below:
O2 - BHO: (no name) - {6c7f8d60-e296-11d8-bc31-005070e60fdd} - C:\WINDOWS\SYSTEM\Q84225087.DLL
O2 - BHO: IEHelper - {26995b65-ea2b-4873-a4ae-f1bc72def401} - C:\WINNT\system32\Q21554734.dll
O2 - BHO: (no name) - {5ddf31de-47ee-4403-8666-99acd5787cb7} - C:\WINDOWS\System32\Q2578796.dll
O2 - BHO: (no name) - {a2700829-46fc-430b-9ef0-930a39a9473b} - C:\WINDOWS\System32\Q89675687.dll
O2 - BHO: IEHelper - {26c01bb0-bde0-436c-b255-06af63d967f5} - C:\WINDOWS\System32\Q17532125.dll
All of these are different but all are SearchFind. Use Hijack This to Fix these. Once you know what to look for its easy to kill
Also A Few cases had this CLSID number. If your log shows this delete it also.
O16 - DPF: {C94158E1-6151-4442-ABE6-FD53D6534EFB} - http://searchfind.info/bar/win32.cab
..........Jim :vivi
1. Notice they are all O2 - BHO
2. Look at the CLSID number, The numbers are all different but they all have 2 things that look different than a regular CLSID number:
a. notice the LETTERS are all NON CAPS
Most CLSID Numbers are in CAPITAL LETTERS
b. Notice the file at the end begins with the Letter Q
Check out the examples below:
O2 - BHO: (no name) - {6c7f8d60-e296-11d8-bc31-005070e60fdd} - C:\WINDOWS\SYSTEM\Q84225087.DLL
O2 - BHO: IEHelper - {26995b65-ea2b-4873-a4ae-f1bc72def401} - C:\WINNT\system32\Q21554734.dll
O2 - BHO: (no name) - {5ddf31de-47ee-4403-8666-99acd5787cb7} - C:\WINDOWS\System32\Q2578796.dll
O2 - BHO: (no name) - {a2700829-46fc-430b-9ef0-930a39a9473b} - C:\WINDOWS\System32\Q89675687.dll
O2 - BHO: IEHelper - {26c01bb0-bde0-436c-b255-06af63d967f5} - C:\WINDOWS\System32\Q17532125.dll
All of these are different but all are SearchFind. Use Hijack This to Fix these. Once you know what to look for its easy to kill
Also A Few cases had this CLSID number. If your log shows this delete it also.
O16 - DPF: {C94158E1-6151-4442-ABE6-FD53D6534EFB} - http://searchfind.info/bar/win32.cab
..........Jim :vivi