"about:blank" issue.

[Guest]

My homepage wouldn't change from 'about:blank" and I downloaded a registry
mechanic which fixed it but that didn't last long. The last thing I did
before was open NOTEPAD, so I figure its because of that damn Notepad virus
thing. I can't confirm that it is that, can anyone let me know what it is?
Is there a way to completely fix this problem?

 

[S.Sengupta]

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.spywareinfo.com/~merijn/downloads.html

Also see the following link:

http://mvps.org/winhelp2002/unwanted.htm

regards,
ssg MS-MVP
pronetworks.org

 

[Rock]

My homepage wouldn't change from 'about:blank" and I downloaded a registry
mechanic which fixed it but that didn't last long. The last thing I did
before was open NOTEPAD, so I figure its because of that damn Notepad virus
thing. I can't confirm that it is that, can anyone let me know what it is?
Is there a way to completely fix this problem?

1. Regularly run updated malware cleaners in safe mode.

2. Have a current AV program running with current definitions

3. Run occasional On line virus scans

4. Have a good 3rd party firewall turned on at all times

5. Practice safe hex.

 

[Kelly]

This sounds more like a user history trail by habit rather than a notepad
virus. Run your cleaners often (especially HijackThis!) and make sure they
are updated.

 

[Gary]

Yes, format c: I tried every tool out there and sooner or
later I would run accross the sector on the MBR that has
the exe file that re-installs this crap. Sorry....

 

[Malke]

Yes, format c: I tried every tool out there and sooner or
later I would run accross the sector on the MBR that has
the exe file that re-installs this crap. Sorry....

It is not necessary to format your drive and start over to get rid of
the about:blank problem. The malware is not located in the Master Boot
Record, either. Here are general spyware removal instructions:

Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. Please read the
instructions carefully. Also, make sure you've visited Windows Update
and applied all security patches. Do not install driver updates from
Windows Update. Make sure you are running a firewall and have a current
antivirus installed using updated definitions.

In addition to the above, I find that a combination of HijackThis and
AboutBuster (get from Major Geeks) works to remove the about:blank
problem. Again, please read the instructions carefully. Removal of this
type of malware often requires a great deal of skill and deep knowledge
of the operating system. If you don't have this or are unsure, take
your machine to a good local repair shop and have them clean it up for
you.

Malke