This Spyware ist detected, but cannot be removed.
it sets your Startpage to 'about:blank'
After removing by the AntiSpyware-Software it happens
again.
How can i remove this definitly ??
Thanks for feedback

This is a truly evil hijak - it took me many hours of
effort to remove it from a friend's PC, a few months ago.
Use another PC and Google to search for the solution - but
it involves registry editing and using safe-mode. Leave
out any step and it will come back. Basically, I think
that it uses a registry entry to activate a dll (rather
than the usual 'Run' registry entries.
If anyone deserves legal action for hacking then it is the
creator(s) of this. They are rumoured to study other
people's suggestions for fixes then they change their
hijack so that the fix won't work any more. Therefore, use
the latest avialable fix.

Dave R


>-----Original Message-----
>This Spyware ist detected, but cannot be removed.
>it sets your Startpage to 'about:blank'
>After removing by the AntiSpyware-Software it happens
>again.
>How can i remove this definitly ??
>Thanks for feedback
>
>.
>

See:

http://www.pchell.com/support/aboutblank.shtml

If you need help with the HijackThis log send them to me.

Ron Kinner MVP
rkinner AT att DOT net
" AT " = "@"
" DOT " = "."

Yes about:blank is very difficult to remove.

First, do a deep
system scan, if that does not find and remove it, boot
your system into safe mode.

Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options put a check next to /SAFEBOOT.

Reboot the computer, and log in as the admin.

Run the MSAS Beta1 with a Deep System Scan, reboot, and
run it again, continue this until MSAS does not find any
problems.

Once it comes up clean go to MSCONFIG again
Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options take the check out of /SAFEBOOT.

Reboot your system into normal mode, open the MSAS and
click on Advanced Tools, Browser Hijacker Recovery, click
Check All, and Restore.

Next Click on Advanced Tools, Click on System Explorers,
to go IE Toolbars, anything that does not have a star,
block, then go to IE BHO's and do the same.

Go down to the Windows Hosts File, and the first one
should be 127.0.0.1 Local Host, if there is anything else
there remove it.

That should solve your problem.


>-----Original Message-----
>This Spyware ist detected, but cannot be removed.
>it sets your Startpage to 'about:blank'
>After removing by the AntiSpyware-Software it happens
>again.
>How can i remove this definitly ??
>Thanks for feedback
>
>.
>

about blank is really hard to get rid of
call pc safety 1-866-727-2338
>-----Original Message-----
>This Spyware ist detected, but cannot be removed.
>it sets your Startpage to 'about:blank'
>After removing by the AntiSpyware-Software it happens
>again.
>How can i remove this definitly ??
>Thanks for feedback
>
>.
>

Do they deal with About Blank, in your experience?

"char" <(E-Mail Removed)> wrote in message
news:109c01c4ff1c$466e2fd0$(E-Mail Removed)...
> about blank is really hard to get rid of
> call pc safety 1-866-727-2338
>>-----Original Message-----
>>This Spyware ist detected, but cannot be removed.
>>it sets your Startpage to 'about:blank'
>>After removing by the AntiSpyware-Software it happens
>>again.
>>How can i remove this definitly ??
>>Thanks for feedback
>>
>>.
>>

"Heinz Baumann" <(E-Mail Removed)> wrote in message
news:094d01c4fe00$79531680$(E-Mail Removed)...
> This Spyware ist detected, but cannot be removed.
> it sets your Startpage to 'about:blank'
> After removing by the AntiSpyware-Software it happens
> again.
> How can i remove this definitly ??
> Thanks for feedback


First, if you don't have WinXP SP2, get LSP-Fix - a free program to repair
damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.
For WinXP SP2 this command will restore the Winsock stacks if you can't
connect after clearing the malware.
Go to Start | Run and type
CMD
In the command window type
netsh winsock reset
Then get CWShredder
http://www.intermute.com/products/cwshredder.html

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/sec...t/default.aspx