Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I don't know what my computer has..


  • Please log in to reply
2 replies to this topic

#1 ilovekaseykahne9

ilovekaseykahne9

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:10 PM

Posted 28 January 2005 - 09:50 AM

Awhile back my cpmputer ended up with a virus of some sort, I guess a hijacker, actually, that constantly made our homepage www.blazefind.com. Most links we would click lead us right back to Blazefind, and our cpmputer was sooo slow. We took it to a specialist and he fixed it, but we have it again. I can't afford to get it fixed again, is there anything else I can do? We have Norton 2005 and Ad Aware, but neither help. It's gotten to the point that sometimes it won't even let me see certain websites anymore. Help!!!

BC AdBot (Login to Remove)

 


m

#2 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:10:10 PM

Posted 28 January 2005 - 10:11 AM

Maybe you should consider posting a Highjack This Log. This link will take you to the HJT Forum. Please read the pinned topics at the top. There you will learn all that you need to know regarding the the posting of your log. Good Luck! :thumbsup:

http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/


Just please keep in mind that all Highjack This Team Members are volunteers. One must practice a little patience, when waiting for help. I promise you though that they will get to you as soon as they are able. :flowers:

And above all do not attempt to work on your log yourself. And only take the advice from an official HJT Team Member. Which will show under thier name and avatar.

One more thing. Do not reply to your own post. As the Team keeps an eye out for zero replies. If they see a reply they will assume that someone is already helping you out. Then I'm afraid that you may get lost in the shuffle.
Posted Image

#3 tweak

tweak

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:10 PM

Posted 28 January 2005 - 10:53 AM

This is what Symantec has about Blaze find

http://sarc.com/avcenter/venc/data/adware.blazefind.html



Adware.BlazeFind
Last Updated on: December 27, 2004 09:37:02 AM


Type: Adware


Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, Microsoft IIS, OS/2, UNIX, Windows 3.x

Removal: Low
Damage: Low



Behavior
Adware.BlazeFind installs itself as a Browser Helper Object and redirects search queries.

Symptoms
Redirection of search queries in Internet Explorer.

Transmission
There have been reports that this program is available on the Web.




File names: 2_0_1brwoserhelper2.dll; unstsa2.exe; key2.txt; installer2.exe

The program performs the following actions:

Creates the following files:
%System%\2_0_1browserhelper2.dll
%System%\UnstSA2.exe
%System%\key2.txt


Registers itself as a Browser Helper Object
Redirects search queries in Internet Explorer to www.blazefind.com




Try this first: Removal using the adware's uninstaller
As this is written, the publisher of this adware, BlazeFind, has instructions on how to uninstall their product using the Windows Add/Remove programs utility. Although it has not been confirmed by Security Response that this will work in all cases, this should be tried first. (If this does not work, or if you simply want to be absolutely sure, you can go on to the Manual removal instructions that follow).

Currently, BlazeFind has uninstall instructions at:

http://blazefind.com/?section=help

(See steps 7 and 8).


Manual removal
The following instructions pertain to all Symantec antivirus products that support Expanded Threat detection.


Update the definitions.
Run a full system scan and delete all the files detected as Adware.BlazeFind.
Delete the value that was added to the registry.

For specific details on each of these steps, read the following instructions.

1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.

2. Scanning for and deleting the files
Start your Symantec antivirus program, and then run a full system scan.
If any files are detected as Adware.BlazeFind, click Delete.


--------------------------------------------------------------------------------
Note: If your Symantec antivirus product reports that it cannot delete a detected file, write down the path and file name. Then use Windows Explorer to locate and delete the file.
--------------------------------------------------------------------------------


3. Deleting the value from the registry

--------------------------------------------------------------------------------

WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.
--------------------------------------------------------------------------------


Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)


Navigate to and delete the keys:

HKEY_CLASSES_ROOT\CLSID\{83DE62E0-5805-11D8-9B25-00E04C60FAF2}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83DE62E0-5805-11D8-9B25-00E04C60FAF2}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{83DE62E0-5805-11D8-9B25-00E04C60FAF2}




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users