about:blank homepage

[Kent]

Hi, I am wa computer professional and have been unable to
solve my problem. About:blank has established itself as my
home page and I have deleted it from my registry with
regedit but it keeps coming back. It also has various pop
ups attached to it and the even come when I change my home
page to www.msn.ca or my passport homepage. Is this the
spyware ads in my registry somehow overwriting my input???
Any suggestions????HELP

 

[what now?]

Lavasoft has a good article on this. Here is a snip I received recently.

------
about:blank - Possible Browser Hijack Attempt?


By Åsa Karlssoon - Content Manager

When scanning with Ad-Aware the homepage about:blank is presented as a
Possible Browser Hijack attempt in the scan results list and in the log
file. The reason for this is that about:blank is used by several variants of
CoolWebSearch to hijack browsers. However, this does not necessarily mean
that your computer is infected with CoolWebSearch.

Ad-Aware will detect multiple objects related to CoolWebsearch if your
computer is infected with a variant of CoolWebSearch. If you have set your
homepage to about:blank and Ad-Aware only detects the about:blank Possible
Browser Hijack attempt it is most unlikely that your computer is infected.

If you have chosen about:blank as your homepage, and don't have issues
with browser hijackers, you can prevent Ad-Aware from detecting about:blank
in future scans by adding it to the Ignore list. Select and right click on
the item in the Scanning results list and select "Add selection to
ignore-list". This will not affect your safety; Ad-Aware will still detect
CoolWebSearch objects if your computer gets infected.

If you have CoolWebSearch on your computer and wish to remove it,
select ALL the CoolWebSearch items, including the about:blank listings, in
the Scanning results list and click Next to remove them. CoolWebSearch can
only be removed if ALL objects are deleted.

 

[Steve Parry]

look here

http://www.akadia.com/services/about_blank_virus.html

hope that helps

 

[ClauJones]

Attempt to use the "HijackThis.exe" program. It will locate entries in
registry, in the temp directory, with the name some like sp.html.
Erase all of them. It will find the program "on-line.exe" and
info??*.zip (this second, in the root of the C:\ directory). Erase the
entry on the registry (through hijackThis), and those files manually.

 

[ClauJones]

It has some other files hiden in the system32 directory. But im not
for sure what are them. I will wait about:blank atack again to see
then. One I remember by now is the mshta.exe

 

[Zhen-Xjell]

Hi, I am wa computer professional and have been unable to
solve my problem. About:blank has established itself as my
home page and I have deleted it from my registry with
regedit but it keeps coming back. It also has various pop
ups attached to it and the even come when I change my home
page to www.msn.ca or my passport homepage. Is this the
spyware ads in my registry somehow overwriting my input???
Any suggestions????HELP

You might want to have a read here:

http://computercops.biz/article-5199-nested-0-0.html

Success rate at removing about:blank from this information is great.