Browser Hijacker Internet Explorer Search Page: abot:blank

H

Heinz Baumann

This Spyware ist detected, but cannot be removed.
it sets your Startpage to 'about:blank'
After removing by the AntiSpyware-Software it happens
again.
How can i remove this definitly ??
Thanks for feedback
 
D

Dave-R

This is a truly evil hijak - it took me many hours of
effort to remove it from a friend's PC, a few months ago.
Use another PC and Google to search for the solution - but
it involves registry editing and using safe-mode. Leave
out any step and it will come back. Basically, I think
that it uses a registry entry to activate a dll (rather
than the usual 'Run' registry entries.
If anyone deserves legal action for hacking then it is the
creator(s) of this. They are rumoured to study other
people's suggestions for fixes then they change their
hijack so that the fix won't work any more. Therefore, use
the latest avialable fix.

Dave R
 
P

PYPC Dream

Yes about:blank is very difficult to remove.

First, do a deep
system scan, if that does not find and remove it, boot
your system into safe mode.

Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options put a check next to /SAFEBOOT.

Reboot the computer, and log in as the admin.

Run the MSAS Beta1 with a Deep System Scan, reboot, and
run it again, continue this until MSAS does not find any
problems.

Once it comes up clean go to MSCONFIG again
Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options take the check out of /SAFEBOOT.

Reboot your system into normal mode, open the MSAS and
click on Advanced Tools, Browser Hijacker Recovery, click
Check All, and Restore.

Next Click on Advanced Tools, Click on System Explorers,
to go IE Toolbars, anything that does not have a star,
block, then go to IE BHO's and do the same.

Go down to the Windows Hosts File, and the first one
should be 127.0.0.1 Local Host, if there is anything else
there remove it.

That should solve your problem.
 
F

Frank Saunders, MS-MVP IE/OE

Heinz Baumann said:
This Spyware ist detected, but cannot be removed.
it sets your Startpage to 'about:blank'
After removing by the AntiSpyware-Software it happens
again.
How can i remove this definitly ??
Thanks for feedback


First, if you don't have WinXP SP2, get LSP-Fix - a free program to repair
damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.
For WinXP SP2 this command will restore the Winsock stacks if you can't
connect after clearing the malware.
Go to Start | Run and type
CMD
In the command window type
netsh winsock reset
Then get CWShredder
http://www.intermute.com/products/cwshredder.html

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top