PDA

View Full Version : How To Find and Remove SearchFind.info


nightowl
09-25-2004, 03:49 PM
Searchfind is easy to remove once you know what to look for. Below are 5 examples of Searchfind

1. Notice they are all O2 - BHO

2. Look at the CLSID number, The numbers are all different but they all have 2 things that look different than a regular CLSID number:

a. notice the LETTERS are all NON CAPS

Most CLSID Numbers are in CAPITAL LETTERS

b. Notice the file at the end begins with the Letter Q

Check out the examples below:

O2 - BHO: (no name) - {6c7f8d60-e296-11d8-bc31-005070e60fdd} - C:\WINDOWS\SYSTEM\Q84225087.DLL

O2 - BHO: IEHelper - {26995b65-ea2b-4873-a4ae-f1bc72def401} - C:\WINNT\system32\Q21554734.dll

O2 - BHO: (no name) - {5ddf31de-47ee-4403-8666-99acd5787cb7} - C:\WINDOWS\System32\Q2578796.dll

O2 - BHO: (no name) - {a2700829-46fc-430b-9ef0-930a39a9473b} - C:\WINDOWS\System32\Q89675687.dll


O2 - BHO: IEHelper - {26c01bb0-bde0-436c-b255-06af63d967f5} - C:\WINDOWS\System32\Q17532125.dll


All of these are different but all are SearchFind. Use Hijack This to Fix these. Once you know what to look for its easy to kill

Also A Few cases had this CLSID number. If your log shows this delete it also.

O16 - DPF: {C94158E1-6151-4442-ABE6-FD53D6534EFB} - http://searchfind.info/bar/win32.cab


..........Jim :vivi

ECA
09-25-2004, 08:24 PM
NightOwl..

I have to ask...

DO YOU REALLY THINK, they will read this??

We've done it Over and OVER and if they looked they could see the patterns.
This may help THOSE FEW that look threw all the posts, but how many will KNOW what to do??

nightowl
09-25-2004, 09:12 PM
I think it will help some of them. Its allready got 15 views. Time Will Tell I guess. If Google and Dogpile pick it up it should get alot of hits........Jim omg:

ECA
09-25-2004, 10:15 PM
along with about 15 other posts in this group

nightowl
09-25-2004, 10:19 PM
Maybe I should delete some of the other posts. At least some that are not too long.........jim

ECA
09-25-2004, 10:21 PM
but maybe someone can learn from THOSE... Lots of info there if they wish to LEARN.

ECA
09-25-2004, 10:22 PM
WOW, you almost as OLD as me...

nightowl
09-25-2004, 10:27 PM
Where does it show our age? :dunno

ECA
09-26-2004, 07:32 AM
how do you think we know your Birthday...YOU POSTED IT.

Birthday:
(DELETED) 17, 1962

For ALL of us to see.

nightowl
09-27-2004, 11:34 AM
Ok I see now. When you click my username.........Jim :vivi

ECA
09-27-2004, 01:05 PM
You are getting GOOOD, you're hired..

nightowl
11-06-2004, 08:49 PM
I wonder if this link is working? Must be, We havent had a log to fix with this problem since I posted it. Too bad no one posts a Thank You. :cool:

ECA
11-06-2004, 11:56 PM
Ya, AINt it kind of them to NOT say anything.

llbbl
01-18-2005, 10:41 AM
good job on the guide nightowl. This is more of the stuff I am talking about!!

nightowl
01-18-2005, 07:09 PM
Hope to make more like this in the future(if I ever get some time..........Jim

silkdog
03-07-2005, 08:44 PM
i hav spy ware and dont know what to do

ECA
03-07-2005, 09:27 PM
http://forums.designtechnica.com/showthread.php?t=5583

Get, Load, update and RUN..
spybot SD, load all it asks...
spywareblaster
ADAWARE
HIJACK THIS, is used to post whats in the reg, that may be causing problems..


This is The Last Post in this thread. If you wish to post a log. Please start a new thread and post your log in the Log Section, thanks. Here is the link.

http://forums.designtechnica.com/forumdisplay.php?f=127