Blaze Find Tool Bar

[Kathleen Riley]

I have downloaded some freeware off the Internet for my
business.
When I turned my computer on this morning, I noticed I had
a new tool bar called search assistant. When I clicked on
it I was taken to Blaze Find website.
I would like to know how to remove this tool bar. I have
ran my Spy Sweeper, Cleaned my Registry with Reg Scrub,
and ran Window Washer. I have tried to left click it and
right click it to delete it but it shows up everytime I
restart my computer.

Here is my Hijack This List:

Logfile of HijackThis v1.97.7
Scan saved at 1:35:22 PM, on 6/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Common Files\Microsoft Shared\Works
Shared\WkUFind.exe
C:\Program Files\Washer\washer.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Microsoft Shared\Works
Shared\wkcalrem.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Kathleen\Local
Settings\Temp\Temporary Directory 2 for
hijackthis.zip\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
F2 - REG:system.ini: UserInit=C:\Windows\System32
\wsaupdater.exe,
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0
\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [LaunchApp] LaunApp
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32
\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32
\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch
Manager\LaunchAp.exe
O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch
Manager\PowerKey.exe"
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch
Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch
Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch
Manager\Wbutton.exe"
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1
\navapw32.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection]
C:\Program Files\Common Files\Microsoft Shared\Works
Shared\WkUFind.exe
O4 - HKCU\..\Run: [Washer] C:\Program
Files\Washer\washer.exe /0
O4 - HKCU\..\Run: [Gadwin PrintScreen 2.6] C:\Program
Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1
\PANICW~1\POP-UP~1\PSFREE.EXE"
O4 - HKCU\..\Run: [SpySweeper] C:\Program
Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O4 - Global Startup: Quicken Scheduled Updates.lnk =
C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Forget Me Not.lnk = ?
O4 - Global Startup: Microsoft Works Calendar
Reminders.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC7F1C1A-E829-
413F-B87D-6A4AAE4F82B1}: NameServer = 208.6.37.8
205.244.200.3


Can anyone help me please?

Thank You,
Kathleen Riley

 

[Jim Byrd]

Hi Kathleen - If you're comfortable operating with the Registry, there are
manual removal instructions here:
http://www.spywareguide.com/product_show.php?id=724

Note that this symptom often indicates the possibility of other malware.
You might want go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.


Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP) The process of removing certain malware may kill your internet
connection. If this should occur, this program, LSPFIX, will enable you to
regain your connection.


In the following, all of these removal tools should be run from Safe mode
when possible


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
UPDATE and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re-boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


A currently common parasite is some malware called CoolWebSearch. Do the
following:

Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip

BE SURE that you get v.158 or later!

You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.

The following links give instructions on how to do these various functions:


HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406>

HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339>

HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039>
(WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239>
(WinME)



Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.

Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13

In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)

Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******


Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:

http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites. (Kathleen, spywareblaster would have prevented you Blaze
infection.)

http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended


Finally, go to Windows Update and ensure that ALL Critical updates are
installed.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Guest]

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

-----Original Message-----
Hi Kathleen - If you're comfortable operating with the Registry, there are
manual removal instructions here:
http://www.spywareguide.com/product_show.php?id=724

Note that this symptom often indicates the possibility of other malware.
You might want go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.


Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP) The process of removing certain malware may kill your internet
connection. If this should occur, this program, LSPFIX, will enable you to
regain your connection.


In the following, all of these removal tools should be run from Safe mode
when possible


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
UPDATE and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re- boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-

bin/forums/ikonboard.cgi. I recommend

using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


A currently common parasite is some malware called CoolWebSearch. Do the
following:

Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip

BE SURE that you get v.158 or later!

You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.

The following links give instructions on how to do these various functions:


HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2001052409420406>

HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2002092715262339>

HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2001111912274039>
2001012513122239>
(WinME)



Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.

Now download and run:
http://www.kellys-korner-

xp.com/regs_edits/RestoreSearch2.REG to restore

your search functions if they've been affected (as they probably will have
been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php? id=3155&file=3&evp=3304750663b552982a8baee6434cfc13

In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)

Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi- bin/forum/ikonboard.cgi?
s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******


Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:

http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit- links for a variety
of parasites. (Kathleen, spywareblaster would have prevented you Blaze
infection.)

http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended


Finally, go to Windows Update and ensure that ALL Critical updates are
installed.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

I have downloaded some freeware off the Internet for my
business.
When I turned my computer on this morning, I noticed I had
a new tool bar called search assistant. When I clicked on
it I was taken to Blaze Find website.
I would like to know how to remove this tool bar. I have
ran my Spy Sweeper, Cleaned my Registry with Reg Scrub,
and ran Window Washer. I have tried to left click it and
right click it to delete it but it shows up everytime I
restart my computer.

<snip>

Can anyone help me please?

Thank You,
Kathleen Riley

.

 

[Phil]

Reinstall java:
The sun version:
http://www.java.com/en/index.jsp

The ms version:
www.virtualmachine.tk

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

-----Original Message-----
Hi Kathleen - If you're comfortable operating with the Registry,
there are manual removal instructions here:
http://www.spywareguide.com/product_show.php?id=724

Note that this symptom often indicates the possibility of other
malware. You might want go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE:
You will need to disable Ad Blocking in Zone Alarm 3.x, if present
or any other Ad Blocking software which interferes with Java
Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.


Before you try to remove spyware using any of the programs below,
download a copy of LSPFIX from any of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is
Win2k or XP) The process of removing certain malware may kill your
internet connection. If this should occur, this program, LSPFIX,
will enable you to regain your connection.


In the following, all of these removal tools should be run from Safe
mode when possible


For the general hijack case, the best way to start is to get
Ad-Aware 6.0, Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
UPDATE and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re- boot and
rerun AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and
Destroy available here: http://security.kolla.de/ SpyBot Support
Forum here: http://www.net-integration.net/cgi-

bin/forums/ikonboard.cgi. I recommend

using both normally. After UPDATING and fixing things with SpyBot
S&D, be sure to re-boot and rerun SpyBot again and repeat this cycle
until you get a clean "no red" scan. The reason is that SpyBot
sometimes has to remove things which are currently "in use" before
it can then clean up others.


Note that sometimes you need to make a judgement call about what
these programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


A currently common parasite is some malware called CoolWebSearch. Do
the following:

Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite. Be sure to close all instances of IE and OE. You may
also get it here if that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip

BE SURE that you get v.158 or later!

You will need to show Hidden files first and then at the end clear
the malware garbage from your System Restore backups after you've
cleaned up. It's best to perform CWShredder (and most other malware
fixers too) from Safe mode and then reboot. AFTER cleaning things
up, then you can disable and then re-enable System Restore. See
******** below.

The following links give instructions on how to do these various
functions:


HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
2001052409420406>

HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
2002092715262339>

HOW TO Disable/Flush System Restore (do this at the end AFTER
cleaning or use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
2001111912274039> (WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
2001012513122239> (WinME)



Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore
your tabs and remove any restrictions that the parasite has put in
place.

Now download and run:
http://www.kellys-korner-

xp.com/regs_edits/RestoreSearch2.REG to restore

your search functions if they've been affected (as they probably
will have been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download
a new fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.) You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php? id=3155&file=3&evp=3304750663b552982a8baee6434cfc13

In Windows Explorer, click on Tools|Folder Options|View and check
"Show hidden files and folders" and uncheck "Hide protected
operating system files". (You may want to restore these when you're
all finished with HijackThis.)

Unzip the downloaded HijackThis to any convenient folder, start it
then press Scan. Click on SaveLog when it's finished which will
create hijackthis.log. Now click the Config button, then Misc Tools
and click on Generate StartupList.log which will create
Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi- bin/forum/ikonboard.cgi?
s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal of your parasite(s).


*******
ONLY IF you've successfully eliminated the malware, you can now make
a new, clean Restore Point and delete any previously saved (possibly
infected) ones. The following suggested approach is courtesy of Gary
Woodruff: For XP you can run a Disk Cleanup cycle and then look in
the More Options tab. The System Restore option removes all but the
latest Restore Point. If there hasn't been one made since the system
was cleaned you should manually create one before dumping the old
possibly infected ones. *******


Once you get this cleaned up, you might want to consider installing
the SpywareBlaster and SpywareGuard here to help prevent this kind
of thing from happening in the future:

http://www.javacoolsoftware.com/spywareblaster.html (Prevents
malware Active X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this
writing will prevent installation or prevent the malware from
running if it is already installed, and it provides information and
fixit- links for a variety of parasites. (Kathleen, spywareblaster
would have prevented you Blaze infection.)

http://www.javacoolsoftware.com/spywareguard.html (Monitors for
attempts to install malware) Keep it UPDATED. Both Very Highly
Recommended


Finally, go to Windows Update and ensure that ALL Critical updates
are installed.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

I have downloaded some freeware off the Internet for my
business.
When I turned my computer on this morning, I noticed I had
a new tool bar called search assistant. When I clicked on
it I was taken to Blaze Find website.
I would like to know how to remove this tool bar. I have
ran my Spy Sweeper, Cleaned my Registry with Reg Scrub,
and ran Window Washer. I have tried to left click it and
right click it to delete it but it shows up everytime I
restart my computer.

<snip>

Can anyone help me please?

Thank You,
Kathleen Riley

.

 

[Jim Byrd]

YW, Kathleen - Here's some help about installing/reinstalling a Java VM:

You can test whether Java is working on your machine at the following sites:

http://www.pocoso.de/pocoso052.html
http://www.clan.lib.ri.us/clan/javatest.html
http://www.fitwise.com/testjava.asp (both 1.0 and 1.1 and what's installed)
http://coglab.wadsworth.com/support/browsercheck.html
http://www.ces.clemson.edu/webct/browser_detect.html

and you can test Javascript here:
http://www.dancespots.net/browsertest.htm


There is good information concerning all aspects of the Java situation here:
http://www.javatester.org/installing.html

Be aware, however, that after Dec 31, 2007, MS will apparently no longer be
distributing Java or providing any support for Java including security
fixes. See here: http://www.microsoft.com/mscorp/java/ so you might want
to start thinking about the future.

You can get the Sun Java J2SE RunTimes or SDK here:
http://java.sun.com/downloads/index.html (all versions - select using the
dropdown)

Sun also offers an automatic download and install of the 1.4 Java plug-in
here: http://java.sun.com/getjava/download.html



For the MS Java VM, you may need to install v.3805 or v.3809 prior to
upgrading to v. 3810 if you didn't previous have MS Java v. 3805 or 3809
installed.

If your OS is Win2000 SP2, SP3 but NOT SP4 then you can download and install
the MS Java VM v. 3809 from here:
http://download.windowsupdate.com/m..._510A502BA8F9B6F19230BB2BCCE87D5474AC9DCD.exe
or here:
http://www.biologylab.awlonline.com...icrosoft.Q810030_W2K_SP4_5849/Q810030_W2K.exe

For Win2000 SP4, you'll need to re-install v.3805, from here:
http://www.download.support.safetec.net/msjavx86/msjavx86.exe
http://www.mvps.org/inetexplorer/msjavx86.exe


For all other OS's:

Download and install the MS Java VM v. 3809 from one of the links here:
http://ftp.idilis.ro/windows/sp/jvm98/msjavwu.exe, or here:
http://secinfo.huji.ac.il/patches/Win-xp/msjavwu.exe


Then upgrade to v. 3810:

For all OS's except Win2kSP4 obtain v. 3810 here:
http://fileforum.betanews.com/detail.php3?fid=1050022631 ,or here:
http://download.windowsupdate.com/m...l/MSJavWU_8073687b82d41db93f4c2a04af2b34d.exe

For Win2k - SP2, SP3 - you can also obtain v. 3810 from Microsoft here:
http://download.microsoft.com/downl...-9b18-423356321682/Q816093_W2K_SP4_X86_EN.exe

For Win2kSP4, to get 3810 from Microsoft you now have to get Q816093 from
Windows Update Catalog - use the entry for Windows 2000 SP4 (this seems to
be the only Win2k option that has it) and then find 816093 in the list. You
can find directions for using the Windows Update Catalog functions here:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;323166. (I am
informed by Torgeir Bakken, MVP, that if you rename the downloaded file from
here: http://fileforum.betanews.com/detail.php3?fid=1050022631 to
msjavwu.exe it will then also work for SP4.)

Both Java VM's can co-exist on your machine quite nicely. Just select which
one you want to use in Tools|Internet Options|Advanced and restart all IE
browsers. Here, courtesy of Michel Gallant, MVP Security, is a tiny utility
which allows you to toggle and view status of your current
Java VM vendor associated with IE:
http://www.jensign.com/JavaScience/SelectIEJVM/index.html

A note from Mitch Gallant:

"One note about the JVM Selector utility: If/when you install a new
version of Sun J2SE, you need to manually
select to have Sun JVM as default JVM for IE (in install), or after install
via the JavaPlugin control panel. This generates the necessary win32
registry entries, which must be present for the utility to know about
JavaPlugin. After that, the utility should work properly."

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

-----Original Message-----
Hi Kathleen - If you're comfortable operating with the Registry, there are
manual removal instructions here:
http://www.spywareguide.com/product_show.php?id=724

Note that this symptom often indicates the possibility of other malware.
You might want go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.


Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP) The process of removing certain malware may kill your internet
connection. If this should occur, this program, LSPFIX, will enable you to
regain your connection.


In the following, all of these removal tools should be run from Safe mode
when possible


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
UPDATE and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re- boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-

bin/forums/ikonboard.cgi. I recommend

using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


A currently common parasite is some malware called CoolWebSearch. Do the
following:

Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip

BE SURE that you get v.158 or later!

You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.

The following links give instructions on how to do these various functions:


HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2001052409420406>

HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2002092715262339>

HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2001111912274039>
(WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/ 2001012513122239>
(WinME)



Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.

Now download and run:
http://www.kellys-korner- xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?
id=3155&file=3&evp=3304750663b552982a8baee6434cfc13

In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)

Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi- bin/forum/ikonboard.cgi?
s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******


Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:

http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit- links for a variety
of parasites. (Kathleen, spywareblaster would have prevented you Blaze
infection.)

http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended


Finally, go to Windows Update and ensure that ALL Critical updates are
installed.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

I have downloaded some freeware off the Internet for my
business.
When I turned my computer on this morning, I noticed I had
a new tool bar called search assistant. When I clicked on
it I was taken to Blaze Find website.
I would like to know how to remove this tool bar. I have
ran my Spy Sweeper, Cleaned my Registry with Reg Scrub,
and ran Window Washer. I have tried to left click it and
right click it to delete it but it shows up everytime I
restart my computer.

<snip>

Can anyone help me please?

Thank You,
Kathleen Riley

.

 

[Plato]

I have downloaded some freeware off the Internet for my
business.

Next time read the docs and or the EULA that you MUST agree to before
installing. In other words, you agreed to the spyware.

 

[Kathleen Riley]

Hi Again,

Sigh Sigh

I have tried everything to get Java going - can I mail my
laptop to you for repair? LOL

I ran tests - some sites said Java was working - some said
it wasn't ....

I reinstalled Java with updates and still no go, and I
checked my settings under Internet Options - Security -
ETC ....

So, now what?? I am about to give up - I wish I had the
knowledge this support team has ....

Anyways - if you have any other ideas please let me know.

Thanks

-----Original Message-----
YW, Kathleen - Here's some help about

installing/reinstalling a Java VM:

You can test whether Java is working on your machine at the following sites:

http://www.pocoso.de/pocoso052.html
http://www.clan.lib.ri.us/clan/javatest.html
http://www.fitwise.com/testjava.asp (both 1.0 and 1.1 and what's installed)
http://coglab.wadsworth.com/support/browsercheck.html
http://www.ces.clemson.edu/webct/browser_detect.html

and you can test Javascript here:
http://www.dancespots.net/browsertest.htm


There is good information concerning all aspects of the Java situation here:
http://www.javatester.org/installing.html

Be aware, however, that after Dec 31, 2007, MS will apparently no longer be
distributing Java or providing any support for Java including security
fixes. See here: http://www.microsoft.com/mscorp/java/ so you might want
to start thinking about the future.

You can get the Sun Java J2SE RunTimes or SDK here:
http://java.sun.com/downloads/index.html (all versions - select using the
dropdown)

Sun also offers an automatic download and install of the 1.4 Java plug-in
here: http://java.sun.com/getjava/download.html



For the MS Java VM, you may need to install v.3805 or v.3809 prior to
upgrading to v. 3810 if you didn't previous have MS Java v. 3805 or 3809
installed.

If your OS is Win2000 SP2, SP3 but NOT SP4 then you can download and install
the MS Java VM v. 3809 from here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/CabPool/Q810030_W2K_510A502BA8F9B6F19230BB2BCCE87D
5474AC9DCD.exe
or here:
http://www.biologylab.awlonline.com/MSJavaVM/Software/en/c om_microsoft.windows2000/x86win2k/com_microsoft.Q810030_W2K
_SP4_5849/Q810030_W2K.exe

For Win2000 SP4, you'll need to re-install v.3805, from here:

http://www.download.support.safetec.net/msjavx86/msjavx86.

exe
http://www.mvps.org/inetexplorer/msjavx86.exe


For all other OS's:

Download and install the MS Java VM v. 3809 from one of the links here:
http://ftp.idilis.ro/windows/sp/jvm98/msjavwu.exe, or here:
http://secinfo.huji.ac.il/patches/Win-xp/msjavwu.exe


Then upgrade to v. 3810:

For all OS's except Win2kSP4 obtain v. 3810 here:
http://fileforum.betanews.com/detail.php3? fid=1050022631 ,or here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/cabpool/MSJavWU_8073687b82d41db93f4c2a04af2b34d.ex
e

For Win2k - SP2, SP3 - you can also obtain v. 3810 from Microsoft here:
http://download.microsoft.com/download/5/7/7/577b7277- 227d-4163-9b18-423356321682/Q816093_W2K_SP4_X86_EN.exe

For Win2kSP4, to get 3810 from Microsoft you now have to get Q816093 from
Windows Update Catalog - use the entry for Windows 2000 SP4 (this seems to
be the only Win2k option that has it) and then find 816093 in the list. You
can find directions for using the Windows Update Catalog functions here:
http://support.microsoft.com/default.aspx?scid=kb;EN- US;323166. (I am
informed by Torgeir Bakken, MVP, that if you rename the downloaded file from
here: http://fileforum.betanews.com/detail.php3? fid=1050022631 to
msjavwu.exe it will then also work for SP4.)

Both Java VM's can co-exist on your machine quite nicely. Just select which
one you want to use in Tools|Internet Options|Advanced and restart all IE
browsers. Here, courtesy of Michel Gallant, MVP Security, is a tiny utility
which allows you to toggle and view status of your current
Java VM vendor associated with IE:
http://www.jensign.com/JavaScience/SelectIEJVM/index.html

A note from Mitch Gallant:

"One note about the JVM Selector utility: If/when you install a new
version of Sun J2SE, you need to manually
select to have Sun JVM as default JVM for IE (in install), or after install
via the JavaPlugin control panel. This generates the necessary win32
registry entries, which must be present for the utility to know about
JavaPlugin. After that, the utility should work properly."

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

Registry, there
are them. NOTE: You
will programs below,
download a (if your OS is Win2k
or LSPFIX, will enable you
to to get Ad-Aware
6.0,

bin/forums/ikonboard.cgi. I recommend

with SpyBot S&D,
be cycle until you
get a remove the
parasite. also get it here
if these various
functions: <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001052409420406>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2002092715262339>

end AFTER cleaning
or <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001111912274039>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001012513122239>

they probably will
have

been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's

UPDATED

frequently.)

instructions for the
removal you can now make a
new, Gary Woodruff: For
XP More Options tab.
The should manually
create this kind of thing
from (Prevents malware
Active fixit- links for a
variety (Monitors for attempts
to
.

 

[Kathleen Riley]

Hi Again,

Sigh Sigh

I have tried everything to get Java going - can I mail my
laptop to you for repair? LOL

I ran tests - some sites said Java was working - some said
it wasn't ....

I reinstalled Java with updates and still no go, and I
checked my settings under Internet Options - Security -
ETC ....

So, now what?? I am about to give up - I wish I had the
knowledge this support team has ....

Anyways - if you have any other ideas please let me know.

Thanks

-----Original Message-----
YW, Kathleen - Here's some help about

installing/reinstalling a Java VM:

You can test whether Java is working on your machine at the following sites:

http://www.pocoso.de/pocoso052.html
http://www.clan.lib.ri.us/clan/javatest.html
http://www.fitwise.com/testjava.asp (both 1.0 and 1.1 and what's installed)
http://coglab.wadsworth.com/support/browsercheck.html
http://www.ces.clemson.edu/webct/browser_detect.html

and you can test Javascript here:
http://www.dancespots.net/browsertest.htm


There is good information concerning all aspects of the Java situation here:
http://www.javatester.org/installing.html

Be aware, however, that after Dec 31, 2007, MS will apparently no longer be
distributing Java or providing any support for Java including security
fixes. See here: http://www.microsoft.com/mscorp/java/ so you might want
to start thinking about the future.

You can get the Sun Java J2SE RunTimes or SDK here:
http://java.sun.com/downloads/index.html (all versions - select using the
dropdown)

Sun also offers an automatic download and install of the 1.4 Java plug-in
here: http://java.sun.com/getjava/download.html



For the MS Java VM, you may need to install v.3805 or v.3809 prior to
upgrading to v. 3810 if you didn't previous have MS Java v. 3805 or 3809
installed.

If your OS is Win2000 SP2, SP3 but NOT SP4 then you can download and install
the MS Java VM v. 3809 from here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/CabPool/Q810030_W2K_510A502BA8F9B6F19230BB2BCCE87D
5474AC9DCD.exe
or here:
http://www.biologylab.awlonline.com/MSJavaVM/Software/en/c om_microsoft.windows2000/x86win2k/com_microsoft.Q810030_W2K
_SP4_5849/Q810030_W2K.exe

For Win2000 SP4, you'll need to re-install v.3805, from here:

http://www.download.support.safetec.net/msjavx86/msjavx86.

exe
http://www.mvps.org/inetexplorer/msjavx86.exe


For all other OS's:

Download and install the MS Java VM v. 3809 from one of the links here:
http://ftp.idilis.ro/windows/sp/jvm98/msjavwu.exe, or here:
http://secinfo.huji.ac.il/patches/Win-xp/msjavwu.exe


Then upgrade to v. 3810:

For all OS's except Win2kSP4 obtain v. 3810 here:
http://fileforum.betanews.com/detail.php3? fid=1050022631 ,or here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/cabpool/MSJavWU_8073687b82d41db93f4c2a04af2b34d.ex
e

For Win2k - SP2, SP3 - you can also obtain v. 3810 from Microsoft here:
http://download.microsoft.com/download/5/7/7/577b7277- 227d-4163-9b18-423356321682/Q816093_W2K_SP4_X86_EN.exe

For Win2kSP4, to get 3810 from Microsoft you now have to get Q816093 from
Windows Update Catalog - use the entry for Windows 2000 SP4 (this seems to
be the only Win2k option that has it) and then find 816093 in the list. You
can find directions for using the Windows Update Catalog functions here:
http://support.microsoft.com/default.aspx?scid=kb;EN- US;323166. (I am
informed by Torgeir Bakken, MVP, that if you rename the downloaded file from
here: http://fileforum.betanews.com/detail.php3? fid=1050022631 to
msjavwu.exe it will then also work for SP4.)

Both Java VM's can co-exist on your machine quite nicely. Just select which
one you want to use in Tools|Internet Options|Advanced and restart all IE
browsers. Here, courtesy of Michel Gallant, MVP Security, is a tiny utility
which allows you to toggle and view status of your current
Java VM vendor associated with IE:
http://www.jensign.com/JavaScience/SelectIEJVM/index.html

A note from Mitch Gallant:

"One note about the JVM Selector utility: If/when you install a new
version of Sun J2SE, you need to manually
select to have Sun JVM as default JVM for IE (in install), or after install
via the JavaPlugin control panel. This generates the necessary win32
registry entries, which must be present for the utility to know about
JavaPlugin. After that, the utility should work properly."

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

Registry, there
are them. NOTE: You
will programs below,
download a (if your OS is Win2k
or LSPFIX, will enable you
to to get Ad-Aware
6.0,

bin/forums/ikonboard.cgi. I recommend

with SpyBot S&D,
be cycle until you
get a remove the
parasite. also get it here
if these various
functions: <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001052409420406>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2002092715262339>

end AFTER cleaning
or <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001111912274039>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001012513122239>

they probably will
have

been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's

UPDATED

frequently.)

instructions for the
removal you can now make a
new, Gary Woodruff: For
XP More Options tab.
The should manually
create this kind of thing
from (Prevents malware
Active fixit- links for a
variety (Monitors for attempts
to
.

 

[Kathleen Riley]

Hi Again,

Sigh Sigh

I have tried everything to get Java going - can I mail my
laptop to you for repair? LOL

I ran tests - some sites said Java was working - some said
it wasn't ....

I reinstalled Java with updates and still no go, and I
checked my settings under Internet Options - Security -
ETC ....

So, now what?? I am about to give up - I wish I had the
knowledge this support team has ....

Anyways - if you have any other ideas please let me know.

Thanks

-----Original Message-----
YW, Kathleen - Here's some help about

installing/reinstalling a Java VM:

You can test whether Java is working on your machine at the following sites:

http://www.pocoso.de/pocoso052.html
http://www.clan.lib.ri.us/clan/javatest.html
http://www.fitwise.com/testjava.asp (both 1.0 and 1.1 and what's installed)
http://coglab.wadsworth.com/support/browsercheck.html
http://www.ces.clemson.edu/webct/browser_detect.html

and you can test Javascript here:
http://www.dancespots.net/browsertest.htm


There is good information concerning all aspects of the Java situation here:
http://www.javatester.org/installing.html

Be aware, however, that after Dec 31, 2007, MS will apparently no longer be
distributing Java or providing any support for Java including security
fixes. See here: http://www.microsoft.com/mscorp/java/ so you might want
to start thinking about the future.

You can get the Sun Java J2SE RunTimes or SDK here:
http://java.sun.com/downloads/index.html (all versions - select using the
dropdown)

Sun also offers an automatic download and install of the 1.4 Java plug-in
here: http://java.sun.com/getjava/download.html



For the MS Java VM, you may need to install v.3805 or v.3809 prior to
upgrading to v. 3810 if you didn't previous have MS Java v. 3805 or 3809
installed.

If your OS is Win2000 SP2, SP3 but NOT SP4 then you can download and install
the MS Java VM v. 3809 from here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/CabPool/Q810030_W2K_510A502BA8F9B6F19230BB2BCCE87D
5474AC9DCD.exe
or here:
http://www.biologylab.awlonline.com/MSJavaVM/Software/en/c om_microsoft.windows2000/x86win2k/com_microsoft.Q810030_W2K
_SP4_5849/Q810030_W2K.exe

For Win2000 SP4, you'll need to re-install v.3805, from here:

http://www.download.support.safetec.net/msjavx86/msjavx86.

exe
http://www.mvps.org/inetexplorer/msjavx86.exe


For all other OS's:

Download and install the MS Java VM v. 3809 from one of the links here:
http://ftp.idilis.ro/windows/sp/jvm98/msjavwu.exe, or here:
http://secinfo.huji.ac.il/patches/Win-xp/msjavwu.exe


Then upgrade to v. 3810:

For all OS's except Win2kSP4 obtain v. 3810 here:
http://fileforum.betanews.com/detail.php3? fid=1050022631 ,or here:
http://download.windowsupdate.com/msdownload/update/v3- 19990518/cabpool/MSJavWU_8073687b82d41db93f4c2a04af2b34d.ex
e

For Win2k - SP2, SP3 - you can also obtain v. 3810 from Microsoft here:
http://download.microsoft.com/download/5/7/7/577b7277- 227d-4163-9b18-423356321682/Q816093_W2K_SP4_X86_EN.exe

For Win2kSP4, to get 3810 from Microsoft you now have to get Q816093 from
Windows Update Catalog - use the entry for Windows 2000 SP4 (this seems to
be the only Win2k option that has it) and then find 816093 in the list. You
can find directions for using the Windows Update Catalog functions here:
http://support.microsoft.com/default.aspx?scid=kb;EN- US;323166. (I am
informed by Torgeir Bakken, MVP, that if you rename the downloaded file from
here: http://fileforum.betanews.com/detail.php3? fid=1050022631 to
msjavwu.exe it will then also work for SP4.)

Both Java VM's can co-exist on your machine quite nicely. Just select which
one you want to use in Tools|Internet Options|Advanced and restart all IE
browsers. Here, courtesy of Michel Gallant, MVP Security, is a tiny utility
which allows you to toggle and view status of your current
Java VM vendor associated with IE:
http://www.jensign.com/JavaScience/SelectIEJVM/index.html

A note from Mitch Gallant:

"One note about the JVM Selector utility: If/when you install a new
version of Sun J2SE, you need to manually
select to have Sun JVM as default JVM for IE (in install), or after install
via the JavaPlugin control panel. This generates the necessary win32
registry entries, which must be present for the utility to know about
JavaPlugin. After that, the utility should work properly."

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

Hi Jim,
Thank You for your knowledge - I now no longer have Blaze
Find on my computer.

I have another problem though ....

When I go to pogo to play games I get a message telling me
my Java isn't working. I wenrt to control panel and made
sure my Program access was on Microsoft - I also tried
Custom and Manufactor - and I still get get games to load
on Pogo, I need to get my badge !! LOL LOL LOL

So I guess I deleted something I shouldn't have.

Can you PLEASE help me once more?

Am I going to have to reinstall Java?

Thanks Again,
Kat

Registry, there
are them. NOTE: You
will programs below,
download a (if your OS is Win2k
or LSPFIX, will enable you
to to get Ad-Aware
6.0,

bin/forums/ikonboard.cgi. I recommend

with SpyBot S&D,
be cycle until you
get a remove the
parasite. also get it here
if these various
functions: <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001052409420406>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2002092715262339>

end AFTER cleaning
or <http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001111912274039>

<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/

2001012513122239>

they probably will
have

been).


Be sure that you also download and install hotfix Q816093, here:

http://support.microsoft.com/?kbid=816093

which blocks the exploit upon which this parasite family depends.


If they don't fix it then start here:

Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's

UPDATED

frequently.)

instructions for the
removal you can now make a
new, Gary Woodruff: For
XP More Options tab.
The should manually
create this kind of thing
from (Prevents malware
Active fixit- links for a
variety (Monitors for attempts
to
.