all about computer information and technology
RSS icon Email icon Home icon
  • Configure Kaspersky To Allow File and Print Sharing

    Posted on January 12th, 2010 admin No comments

    File and print sharing are a convenient feature in Windows XP but have some security issues. Strong measures such as firewalls are key to the safety of a network. However, if not configured properly, such software can actually block access to file and print sharing. Most vendors provide documentation which explains the correct way to set this. Kaspersky Internet Security is a very strong application which can be configured to protect each computer but also allow access to file and print sharing at the same time. It also has built-in anti-virus, pop-up blocker and a large database of virus definitions which it uses to detect threats and other intrusions. It actively protects im such a way that it prevents infections before they can install themselves. It is effective in restricting unauthorized connections to shares from over the Internet without blocking them from legitimate machines inside the LAN. The best part is that Kaspersky comes with a 3-user license allowing it to be installed on up to 3 computers at once, perfect for protecting a small LAN.

    Here are the step-by-step instructions to configure Kaspersky to allow file and print sharing:

    1. Open Kaspersky Internet Security 7.0
    2. Click the ‘Settings’ button. This opens the main settings window.
    3. In the menu on the left, click the black box to the left of where it says ‘Protection’ to expand the list of options beneath it (if it is not already expanded).
    4. Click ‘Firewall’. This opens the firewall options.
    5. Under ‘Filtration System’, click the ‘Settings…’ button. This opens another settings window.
      Note: Be careful, there are two of these buttons on the same screen under different categories. Make sure to click the one towards the top.
    6. Click the ‘Zones’ tab.
    7. Highlight the zone for your network adapter by clicking it once. You can find the correct zone by scrolling to the right and looking under the ‘Description’ column. If it lists the name of an ethernet card as the descirption then that is the one.
      Note: If you have two adapters, for instance one wireless and one ethernet, you will need to do this to whichever one is used for sharing. Both adapters can be set for this as well, if needed.
    8. Under ‘Rule decscription (click underline parameters to edit):’ find where it says ‘Zone Status: Internet’. The word ‘Internet’ is in blue letters with an underline. Click it twice so it changes to “Local Network”.
      Note: Do not use the ‘Trusted’ setting. It is very insecure.
    9. Click ‘OK’.
    10. Click ‘OK’ on the previous Window.
    11. Close Kaspersky. Do not worry, this does not close the entire program. It will still be running and guarding the PC.
    12. Do this to all PCs which will be used to share files and/or printers.

  • BlazeFind Removal Guide

    Posted on May 5th, 2009 admin No comments

    BlazeFind Description

    BlazeFind is a web browser toolbar that may redirect your browser search requests through Blazefind.com, and may also launch pop-up advertisements. BlazeFind is related to CDT, Inc.

    How can I Detect BlazeFind?

    The most common spyware removal tactic is to uninstall BlazeFind by using the “Add/Remove Programs” utility. However, as there may still be hidden BlazeFind files, it’s possible that BlazeFind will reappear after reboot. Follow the BlazeFind detection and removal methods below.

    BlazeFind Automatic Detection (Recommended)

    Is your PC infected with BlazeFind? To safely & quickly detect BlazeFind, we highly recommend you…

    Download SpyHunter's Malware Scanner Download SpyHunter’s Malware Scanner.

    SpyHunter’s free version is only for malware detection. If SpyHunter’s malware scanner detects BlazeFind on your PC, you will need to purchase SpyHunter’s malware removal tool to remove BlazeFind and other malware threats.

    BlazeFind Manual Removal Instructions

    Below is a list of BlazeFind manual removal instructions and BlazeFind components listed to help you remove BlazeFind from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

    Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter’s malware detection tool to check for BlazeFind.

    Step 1 : Use Windows File Search Tool to Find BlazeFind Path

    1. Go to Start > Search > All Files or Folders.
    2. In the “All or part of the the file name” section, type in “BlazeFind” file name(s).
    3. To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
    4. When Windows finishes your search, hover over the “In Folder” of “BlazeFind”, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete BlazeFind in the following manual removal steps.

     

    Step 2 : Use Registry Editor to Remove BlazeFind Registry Values

    1. To open the Registry Editor, go to Start > Run > type regedit and then press the “OK” button.
    2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
    3. To delete “BlazeFind” value, right-click on it and select the “Delete” option.
    4. Locate and delete “BlazeFind” registry entries:

    ==================

    83DE62E0-5805-11D8-9B25-00E04C60FAF2
    C5941EE5-6DFA-11D8-86B0-0002441A9695

    ==================

    Step 3 : Use Windows Command Prompt to Unregister BlazeFind DLL Files

    1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the “OK” button.
    2. Type “cd” in order to change the current directory, press the “space” button, enter the full path to where you believe the BlazeFind DLL file is located and press the “Enter” button on your keyboard. If you don’t know where BlazeFind DLL file is located, use the “dir” command to display the directory’s contents.
    3. To unregister “BlazeFind” DLL file, type in the exact directory path + “regsvr32 /u” + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u BlazeFind.dll) and press the “Enter” button. A message will pop up that says you successfully unregistered the file.
    4. Search and unregister “BlazeFind” DLL files:
    ===============
    3_0_1browserhelper3.dll
    ================

    Step 4 : Detect and Delete Other BlazeFind Files

    1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
    2. Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.
    3. To change directory, type in “cd name_of_the_folder”.
    4. Once you have the file you’re looking for type in “del name_of_the_file”.
    5. To delete a file in folder, type in “del name_of_the_file”.
    6. To delete the entire folder, type in “rmdir /S name_of_the_folder”.
    7. Select the “BlazeFind” process and click on the “End Process” button to kill it.
    8. Remove the “BlazeFind” processes files:

    ===============

    3_0_1browserhelper3.dll

    ===============

  • Virus Cleaning - olhrwef.exe

    Posted on May 5th, 2009 admin No comments

    Run this script with kaspersky AVZ, instructions linked in pinned topics at top of this forum page, PC will reboot:

    CODE

    ===================

    begin
    SetAVZGuardStatus(True);
    SearchRootkit(true, true);
    QuarantineFile(’C:\WINDOWS\system32\olhrwef.exe’,”);
    QuarantineFile(’C:\WINDOWS\system32\nmdfgds0.dll’,”);
    QuarantineFile(’C:\autorun.inf’,”);
    QuarantineFile(’C:\j60osk9.cmd’,”);
    QuarantineFile(’D:\autorun.inf’,”);
    QuarantineFile(’D:\j60osk9.cmd’,”);
    DeleteFile(’D:\j60osk9.cmd’);
    DeleteFile(’D:\autorun.inf’);
    DeleteFile(’C:\j60osk9.cmd’);
    DeleteFile(’C:\autorun.inf’);
    DeleteFile(’C:\WINDOWS\system32\nmdfgds0.dll’);
    DeleteFile(’C:\WINDOWS\system32\olhrwef.exe’);
    BC_ImportDeletedList;
    ExecuteSysClean;
    BC_Activate;
    RebootWindows(true);
    end.

    =====================================
    After run script, attach a Combofix log, please review and follow these instructions carefully.

    Download it here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    Before saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

    Now, please make sure no other programs are running, close all other windows until after the scanning and removal process has taken place.

    Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
    Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall. It may take a while to complete
    scanning and this is normal.

    You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after scanning has completed.

    Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt , please attach it to your next post, along with any older Combofix log that you may have.