PC Review Forums Newsgroups Microsoft AntiSpyware Security Signatures False positive: about:blank

Reply

False positive: about:blank

 
Thread Tools Rate Thread
Old 10-01-2005, 06:19 PM   #1
Mike Kienenberger
Guest
 
Posts: n/a
Default False positive: about:blank


I think it's a bit ridiculous to consider starting a web
browser with a blank page as a High spyware threat....

-Mike

Internet Explorer Start Page: about:blank

Possible Browser Hijack
Type: Browser Hijacker
Threat Level: High

  Reply With Quote
Old 10-01-2005, 09:20 PM   #2
Steve Wechsler [MVP]
Guest
 
Posts: n/a
Default Re: False positive: about:blank

Mike Kienenberger wrote:

> I think it's a bit ridiculous to consider starting a web
> browser with a blank page as a High spyware threat....
>
> -Mike
>
> Internet Explorer Start Page: about:blank
>
> Possible Browser Hijack
> Type: Browser Hijacker
> Threat Level: High
>


Mike,

My system has about:blank as the Homepage and I'm not getting the
warning that you are. Try going to Tools, Advanced Tools, Browser
Hijack Settings Restore, and setting the Homepage from within there to
see if that resolves the warning message.

Steve Wechsler (akaMowGreen)
MVP Windows Server
AumHa VSOP
  Reply With Quote
Old 11-01-2005, 04:01 AM   #3
mikeb
Guest
 
Posts: n/a
Default False positive: about:blank

fwiw, Ad-Aware 6 on my Win98SE box, after a recent update
(original version didn't do this), also hits on
about:blank. You would think that such an entry would be
benign, but perhaps some spyware out there is using it.
Interestingly, it only hits on that for IE; I also start up
Mozilla on blank, but that's not flagged. Maybe the
Ad-Aware types don't know how to check Netscape/Mozilla
settings? Does MS' spyware-killer check
Netscape/Mozilla/Firefox?

Yes, I need to update Mozilla to Firefox, but haven't found
the hours to download it yet (still on dialup...).
>-----Original Message-----
>I think it's a bit ridiculous to consider starting a web
>browser with a blank page as a High spyware threat....
>
>-Mike
>
>Internet Explorer Start Page: about:blank
>
>Possible Browser Hijack
>Type: Browser Hijacker
>Threat Level: High
>


  Reply With Quote
Old 12-01-2005, 05:40 PM   #4
Guest
 
Posts: n/a
Default False positive: about:blank

Some of the CoolWebSearch variants (among others) use this
as a browser home page. I think they actually change the
handler for about:blank so it launches the adware DLL
instead when you go to that page.

I agree it shouldn't detect it unless you are also
infected with CWS or similar.

Kyle
>-----Original Message-----
>I think it's a bit ridiculous to consider starting a web
>browser with a blank page as a High spyware threat....
>
>-Mike
>
>Internet Explorer Start Page: about:blank
>
>Possible Browser Hijack
>Type: Browser Hijacker
>Threat Level: High
>
>.
>

  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off