Vous êtes sur la page 1sur 36

<h2>Profile</h2> <strong>22Find.

com</strong > is one of the browser hijackers that worm through computers by primarily downloads from Internet and infected !" # ocal !rea "etwork$. %nce the infiltration is initiated& default homepage as well as other na'igation sites will be hijacked by 22find.com to generali(e its partner sites by force& which leads to its increasing website traffic from which spammer behind it can make benefit. <center><img class)*alignnone si(e+full wp+ image+,,--* alt)*22find* src)*http.//blog.'ilmatech.co

m/wp+ content/uploads/2/01/00/22fin d.jpg* width)*201* height)*3/0* /></center> <4++more++>Interception amount of 22Find.com once reached e5tremely high record in February this year. 6hough the amount has been decreased recently thanks to the 'igorous publicity of its 'icious nature as well as efficient solution by <a title)*computer professionals* href)*http.//blog.'ilmatech.co m/* target)*7blank*>computer professionals</a>& 22find.com keeps affecting P8 users with changes in directories it

settles down and a broader ways to spread its 'irulent codes and components& such as the employment of 6rojan techni9ue to infect email/instant chat tools for sending its link/links leading to 22find.com download to all detected contacts. :enerally speaking& at the first phase of its infiltration& 22find.com ser'es e5actly like a normal search engine& offering search results with its search engine function coupled with smart web search function. !s long as 'ictims do not get to reali(e its 'icious nature and keep adopting it as the main search engine& each new tab will

display 22find.com page automatically without authori(ation before long. ;y then& configuration of the kernel part in a target machine and some system file will ha'e been modified by 22find.com to be under its manipulation. <odifications by malicious items can be dangerous since 'ulnerability may 'ery well be brought into being and stay readily to be utili(ed for additional attacks by infections concealed in the Internet. !s a browser hijacker& 22find.com can thus manage to form 'ulnerability on web applications that are the major items to be

e5ploited for the introduction of toolbar& tracking cookies& spam pop+up ad'ertisements& etc.. =nbsp> <h2>?ecommended @ay to ?emo'e 22Find.com</h2> It has been known that most browser hijackers are not flagged by installed anti+'irus programs as 'irus. 6ake some most notorious browser hijacker for e5ample& <a title)*search.conduit.com* href)*http.//blog.'ilmatech.co m/search+conduit+com+'irus+ help+remo'e+search+conduit+ com+redirect+'irus+ thoroughly/* target)*7blank*>search.cond uit.com</a> and babylon.com. 6heir high

traffics ha'e benefited many product makers& including the ones behind freeware/shareware& thus more product makers would like to make those Asearch enginesB as partners. 6he same goes to 22find.com. !ctually& the major reason for the detection being disabled is attributed to its infiltration method. Csing ad'anced 6rojan techni9ue& 22find.com is capable of binding its components onto system files or the ones 22find.com generates resemble system files. !fter the 'alues in database being changed& the counterfeit system files will be able to confuse P8 users as well as installed anti+'irus

programs with its e5tensions hidden. In such case& manual method is recommended to remo'e e'ery files generated by 22find.com in a bid to eradicate the 'ulnerability totally. 8ircumspection is always needed when going through the following instruction. !ny slight mistake may gi'e rise to undesirable and une5pected computer issues instantly or o'er time. <strong>Dilma6ech %nline Eupport</strong> is always here readily to help if thereBs confusion or trouble. <p align)*center*><a onclick)*return open7window#$>*

href)*ja'ascript.>*><img alt)*li'e chat* src)* http.//blog.'ilmatech.com/wp+ content/uploads/2/01//,/li'e+ chat+button.jpg* width)*1F/* height)*--* /></a></p> =nbsp> <h2>Eelf Instruction to ?emo'e 22Find.com 8ompletely</h2> =nbsp> <strong>0. end the running process of 22Find.com #some %E has its running process while others donGt$.</strong> =nbsp> <span style)*te5t+decoration. underline>*>@indows H</span></p> <ul> <li>Iold 8trl& !lt and Jelete key at once to select K6ask

<anagerL& hit Mnter key to get its window.<img class)*alignnone si(e+full wp+ image+,,-H* alt)*ctrlNaltNdel* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/ctrlN altNdel2.jpg* width)*,//* height)*0HH* /></li> <li>;rowse to Process tab on K6ask <anagerLAs window.</li> <li>6ick the bo5 ne5t to items generated by 22Find.com& hit AMndB to remo'e all the selected.</li> </ul> =nbsp> <span style)*te5t+decoration. underline>*>@indows2/'ista/O P</span>

<ul> <li>Cse 8trl& !lt and Jelete key combination to bring up 6ask <anager window.</li> <li>"a'igate to Process tab and check the bo5 ne5t to items related to 22Find.com& hit AMnd ProcessB to remo'e all the selected.</li> </ul> =nbsp> <span style)*te5t+decoration. underline>*><ac</span> <ul> <li>Iold and press 8ommand& %ption and Msc key combination to bring up Force Puit window.<img class)*alignnone si(e+full wp+ image+,,-F* alt)*commandNoptNesc* src)*http.//blog.'ilmatech.co

m/wp+ content/uploads/2/01/00/com mandNoptNesc.jpg* width)*,//* height)*21F* /></li> <li>8lick once on 22find.com in the list and hit KForce PuitL button to end the intended process.<img class)*alignnone si(e+full wp+ image+,,2/* alt)*force9uit* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/force 9uit.jpg* width)*1,/* height)*2FF* /></li> </ul> =nbsp> <strong>2. remo'e 22Find.com with reset function on browsers to as the first attempt.</strong>

=nbsp> <span style)*te5t+decoration. underline>*>Internet M5plorer</span> <ul> <li>8lick on the 6ools menu and then select Internet %ptions.</li> <li>In the Internet %ptions window click on the !d'anced tab.</li> <li>6hen click on the ?estore Jefaults button and then press %Q.<img class)*alignnone si(e+full wp+ image+,,20* alt)*reset IM* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/rese t+IM.png* width)*1,/* height)*3H1* /></li> </ul>

=nbsp> <span style)*te5t+decoration. underline>*>Firefo5</span> <ul> <li>8lick on the Firefo5 button.</li> <li>Point the mouse to Ielp and select 6roubleshooting information in the drop down list.</li> <li> ocate a bo5 containing A?eset Firefo5B button on the left uppers corner of the web page.<img class)*alignnone si(e+full wp+image+,,22* alt)*reset7firefo570* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/rese t7firefo570.jpg* width)*,//* height)*1/3* /></li> </ul>

=nbsp> <span style)*te5t+decoration. underline>*>:oogle 8hrome</span> <ul> <li>8hoose A8ustomi(e and 8ontrol :oogle 8hromeB menu.</li> <li>Eelect A%ptionsB.</li> <li>8lick ACnder the IoodB tab on A%ptionsB window.</li> <li>8lick A?eset to JefaultsB button. <img class)*alignnone si(e+full wp+ image+,,23* alt)*reset gg3* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/rese t+gg3.jpg* width)*,//* height)*,/H* /></li> </ul> =nbsp>

<span style)*te5t+decoration. underline>*>Eafari</span> <ul> <li>:o to Eafari menu ne5t to the !pple icon.</li> <li>8hoose A?eset EafariB. <img class)*alignnone si(e+ full wp+image+,,21* alt)*?eset safari* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/?ese t+safari,.png* width)*,//* height)*1H-* /></li> <li>6ick all gi'en options.</li> <li>Press A?esetB to confirm the change.</li> </ul> =nbsp> <span style)*te5t+decoration. underline>*>%pera</span>

<ul> <li>Ehow hidden files and folders #e5plicit instruction on this is shown below$ and tick KEhow hidden files& folders and dri'esL under Khidden files and foldersL option.</li> <li>8lose %pera and na'igate to K8.RCsersRuser7nameR!ppJata R?oamingR%peraR%peraRL.</li> <li>?emo'e %perapref.ini file there.</li> </ul> =nbsp> <strong>1. to further remo'e 22Find.com& manually modification on browser settings should be made.</strong> =nbsp> <span style)*te5t+decoration.

underline>*>Firefo5</span> <ul> <li>8lick on the 6ools menu at the left top of the Firefo5 window.</li> <li>Eelect K<anage !dd+ onsL option.</li> <li>?emo'e 22Find.com under M5tensions tab and Plugins tab respecti'ely.<img class)*alignnone si(e+full wp+ image+,,2,* alt)*firefo5 management* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/firef o5+management,.jpg* width)*,//* height)*122* /></li> </ul> =nbsp> <span style)*te5t+decoration.

underline>*>:oogle 8hrome</span> <ul> <li>8lick on A8ustomi(e and controlB :oogle 8hrome icon and select AEettingsB.</li> <li> ocate *<anage !dd+on* button on the right pane to remo'e the indication of 22find.com there.</li> <li>@hen done& click on AM5tensionB on the left pane and remo'e any indication of 22Find.com from AM5tensionB window. <img class)*alignnone si(e+ full wp+image+,,2-* alt)*google chrome settings* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/goog le+chrome+settings.jpg*

width)*,//* height)*1F,* /></li> </ul> =nbsp> <span style)*te5t+decoration. underline>*>Internet M5plorer</span> <ul> <li>8lick open 6ools menu and choose A<anage !dd+ onsB.</li> <li>Find and click on something useless including 22Find.com in A6oolbars and M5tensionsB& AEearch Pro'idersB respecti'ely. <img class)*alignnone si(e+ full wp+image+,,22* alt)*manage addon IM* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/man

age+addon+IM-.jpg* width)*,//* height)*12,* /></li> </ul> =nbsp> <span style)*te5t+decoration. underline>*>%pera</span> <ul> <li>%pen up %pera then press and hold !ltNP key at once to initiate a new tab to modify.</li> <li> ocate KEearchL section and remo'e 22Find.com from Kmanage search engineL option.</li> <li>;rowse to Pri'acy and Eafety on the left pane to locate K8ookieL which is on the right pane.</li> <li>8lick on Kall cookies and website dataL button there to

remo'e all cookies as recommended.<img class)*alignnone si(e+full wp+ image+,,2H* alt)*opera* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/oper a1.png* width)*,//* height)*13,* /></li> </ul> =nbsp> <strong>3. show hidden files and folders before find out and delete any item generated by 22Find.com in Jri'e 8.</strong> =nbsp> <span style)*te5t+decoration. underline>*>@indows H</span> <ul> <li>%pen @indows M5plorer

on the Etart Ecreen.<img class)*alignnone si(e+full wp+ image+,,2F* alt)*windows e5plorer* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/wind ows+e5plorerH.jpg* width)*,//* height)*11,* /></li> <li>Eelect Diew tab on @indows M5plorer window.</li> <li>6ick AFile name e5tensionsB and AIidden itemsB options.<img class)*alignnone si(e+full wp+ image+,,H/* alt)*winH hidden file* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/winH

+hidden+file-.jpg* width)*,//* height)*2,0* /></li> <li>"a'igate into 8. @indows and Eystem12 to remo'e items named after 22Find/ contained in the folder named after 22Find as well as the items resembling s'chost.e5e and winlogon.e5e there.</li> </ul> =nbsp> <span style)*te5t+decoration. underline>*>@indows 2/OP/Dista</span> <ul> <li>%pen A8ontrol PanelB from Etart menu and search for AFolder %ptionsB.<img class)*alignnone si(e+full wp+ image+,,H0* alt)*folder

options0* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/folde r+options000.jpg* width)*,//* height)*31-* /></li> <li>Cnder Diew tab to tick AEhow hidden files and folders and non+tick Iide protected operating system files #?ecommended$B and then click A%QB.</li> <li>"a'igate into 8. @indows and Eystem12 to remo'e items named after 22Find/ contained in the folder named after 22Find as well as the items resembling s'chost.e5e and winlogon.e5e there.</li> </ul>

=nbsp> <span style)*te5t+decoration. underline>*><ac</span> <ul> <li>%pen Finder to find and bring up Ctilities folder.</li> <li>Initiate a terminal window to copy and paste the line there.<img class)*alignnone si(e+full wp+ image+,,H2* alt)*<ac+Finder+ 6erminal* src)*http.//blog.'ilmatech.co m/wp+ content/uploads/2/01/00/<ac+ Finder+6erminal.png* width)*,//* height)*130* /></li> </ul> <block9uote> defaults write com.apple.Finder

!ppleEhow!llFiles SME </block9uote> <ul> <li>Press return button to hold AaltB on the keyboard and right click on the Finder icon.</li> <li>8lick on ?elaunch button.</li> <li>"a'igate into 8. @indows and Eystem12 to remo'e items named after 22Find/ contained in the folder named after 22Find as well as the items resembling s'chost.e5e and winlogon.e5e there.</li> <li>%nce the action to remo'e items generated by 22Find.com in 8. @indows is done& follow the same process to replace the abo'e line

with</li> </ul> <block9uote> defaults write com.apple.Finder !ppleEhow!llFiles "% </block9uote> =nbsp> <strong>,. remo'e 22Find.com from database.</strong> =nbsp> <span style)*te5t+decoration. underline>*>IM</span> <ul> <li>"a'igate to M5plorer ;ars& M5tensions respecti'ely under</li> </ul> <block9uote> IQMS78C??M"67CEM?R <icrosoftRInternet M5plorerR

</block9uote> to find and select items related to 22Find.com> right click on selected item to delete it. =nbsp> <span style)*te5t+decoration. underline>*>:oogle 8hrome</span> <ul> <li>"a'igate to 8lients& 8lientEtate and 8lientEtate<edium respecti'ely under</li> </ul> <block9uote> IQMS7 %8! 7<!8II"MRE%F6@ !?MR:oogle </block9uote> to find and select items related to 22Find.com> right

click on selected item to delete it. <ul> <li>"a'igate to 8lientEtate under</li> </ul> <block9uote> IQMS78C??M"67CEM?REoftwar eR:oogleRCpdate </block9uote> to find and select items related to 22Find.com> right click on selected item to delete it. <ul> <li>"a'igate to 8ommon under</li> </ul> <block9uote> IQMS78C??M"67CEM?REoftwar eR:oogleR </block9uote>

to find and select items related to 22Find.com> right click on selected item to delete it. =nbsp> <span style)*te5t+decoration. underline>*><o(illa Firefo5</span> <ul> <li>"a'igate to M5tensions under</li> </ul> <block9uote> IQMS78C??M"67CEM?R <icrosoftR<o(illaR Firefo5 </block9uote> to find and select items related to 22Find.com> right click on selected item to delete it. <ul>

<li>"a'igate to</li> </ul> <block9uote>IQMS78C??M"67 CEM?R <icrosoftR<o(illaPlugins</blo ck9uote> to find and select items generated by 22Find.com> right click on selected item to delete it. <ul> <li>"a'igate to</li> </ul> <block9uote> IQMS7 %8! 7<!8II"MRE%F6@ !?MR<o(illaPlugins </block9uote> to find and select items generated by22Find.com> right click on selected item to delete it.

=nbsp> <span style)*te5t+decoration. underline>*>%pera</span> <ul> <li>"a'igate to</li> </ul> <block9uote> IQMS78C??M"67CEM?REoftwar eR%pera Eoftware </block9uote> to find and select items generated by 22Find.com> right click on selected item to delete it. =nbsp> <strong>8onclusion.</strong > 22find.com is categori(ed as a browser hijacker with the

capability of imposing the following chaos both on computers and browsers. <ul> <li>Jefault homepage being hijacked by 22find.com.</li> <li>Emart web search being replaced by 22find.com.</li> <li>Eearch results being filtered by 22find.com to gi'e away its partnersB websites mainly.</li> <li>!dditional web applications being mounted onto a target computer& among which can be toolbar& popup adware& tracking cookies.</li> <li>Installed programs becoming tardy in response.</li> <li>Eystem failure might be

caught in sight.</li> </ul> "umerating installed directories& 22find.com manages to learn the information stored inside. 6hereBs a big chance that the information will be collected and transferred to other spammers for e5tra money. :etting increasing traffic is not necessarily the only way for 22find.com to get profit. 6o stop the information theft and infectious infiltration completely and efficiently& it is recommended to adopt manual way to remo'e 22find.com in a bid to eradicate any slight chance for its reemergence by a tiny piece of lefto'er. If the case

where re9uired computer skills are una'ailable arises& please feel free to contact computer e5perts from <strong>Dilma6ech %nline Eupport</strong> for instant help with <a title)*solutions applicable to concrete situations* href)*http.//blog.'ilmatech.co m/category/pc+security+ ser'ice/* target)*7blank*>solutions applicable to concrete situations</a>. <p align)*center*><a onclick)*return open7window#$>* href)*ja'ascript.>*><img alt)*li'e chat* src)* http.//blog.'ilmatech.com/wp+ content/uploads/2/01//,/li'e+

chat+button.jpg* width)*1F/* height)*--* /></a></p>

Vous aimerez peut-être aussi