Thursday, August 15, 2013

Remove the 22Find.com BrowserRemove the 22Find.com Browser

Remove the 22Find.com Browser


22Find.com is an adware. 22Find.com is a browser hijacker which install some free program into the computer and offer the user to download free program. 22Find.com change the setting of the browser such as the home page and default search engine without permission of the user. You cannot uninstall 22Find.com through Add or Remove Programs in Control Panel. The user must use special program to remove it or remove it manually by using the guide stated below. 22Find.com website will be launched whenever you launch other free programs downloaded by 22Find.com automatically.

22Find.com functions like a normal search engine which provide features to search web, images, videos, news, 337, 999gag etc.

22Find.com should be removed immediately!

Removal Guide
Kill Process (How to kill a process effectively?)
[random].exe
CheckRun22find.exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013040320130404
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CheckRun22find_uninstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "CheckRun22find_uninstaller" = %AppData%\CheckRun22find.exe" -c=http://www.22find.com/?utm_source=b&utm_medium=mlv&from=mlv&uid=HD_VB9ad64b62"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "C:\Program Files\Mozilla Firefox\firefox.exe http://www.22find.com/?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996709"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "C:\Program Files\Internet Explorer\iexplore.exe http://www.22find.com/?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996709"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs "Tabs" = "http://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996709"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Page_URL" = "http://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996709"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Start Page" = "http://www.22find.com/newtab?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996709"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search "CustomizeSearch" = "http://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996710"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search "SearchAssistant" = "http://search.22find.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=SEAGATE_HS9ad64b62-231b0130&ts=1364996710"


Delete Files and Folder
%AppData%\CheckRun22find.exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\22find.lnk
%UserProfile%\Desktop\22find.lnk
c:\Program Files\Mozilla Firefox\searchplugins\22find.xml
c:\User Data\Default\Preferences
c:\User Data\Default\Web Data
c:\User Data\Default\Extensions\novo_price_comparison.crx
c:\WINDOWS\Fonts\segoeui.ttf
File Location Notes:

%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] for Windows 2000/XP, C:\Users\[Current User] for Windows Vista/7/8, and c:\winnt\profiles\[Current User] for Windows NT.

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.

No comments:

Post a Comment