Home Page HiJacked!

S

Steve Greer

When I open IE6.0, my home page is always set
to "about:blank."

The "about:blank" page is some gargage search page that's
replaced my normal blank htm.

This occurs off line as well as on line, so the junk file
is somewhere on my machine. I've cleared every temporary
internet file and any questionable file I can find, but no
luck getting rid of the thing.

I've reset my "homepage" to it's desired location many
times, and reset IE to default vaules, but my home page is
always this HiJacked "about:blank" when I re-open IE6.0.

I have extensive McAfee and other scurb and clean
software. Nothing has found the culprit.

Maybe if I knew more about where the normal 'about:blank"
htm is held, and how to restore same, I'd have some luck.

Thanks for your help

Steve
 
D

Don Varnau

Steve,
That's a variant of coolwebsearch
http://www.spywareinfo.com/~merijn/cwschronicles.html#aboutblank

CWShredder from http://www.spywareinfo.com/~merijn/downloads.html should
remove it.

You should probably follow up with Ad-aware and/or Spybot. You may have
other malware installed.
See: http://mvps.org/winhelp2002/unwanted.htm for more information,
including security tips.

Don
--
MVP IE/OE
Please reply to the newsgroup so that others may participate.

"Steve Greer" wrote in message
news:[email protected]...
 
S

Shenan Stanley

Steve said:
When I open IE6.0, my home page is always set
to "about:blank."

The "about:blank" page is some gargage search page that's
replaced my normal blank htm.

This occurs off line as well as on line, so the junk file
is somewhere on my machine. I've cleared every temporary
internet file and any questionable file I can find, but no
luck getting rid of the thing.

I've reset my "homepage" to it's desired location many
times, and reset IE to default vaules, but my home page is
always this HiJacked "about:blank" when I re-open IE6.0.

I have extensive McAfee and other scurb and clean
software. Nothing has found the culprit.

Maybe if I knew more about where the normal 'about:blank"
htm is held, and how to restore same, I'd have some luck.

Thanks for your help

Take the advice that has worked for most other spyware/adware/hijackers:

You may have spyware/adware infesting your machine, follow the
appropriate section for that, making sure you use at least
THREE of the tools I list to scan and clean your machine AFTER
updating them. Cleaning up spyware/adware/malware usually
solves home page hijackers as well.


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well. SpywareBlaster is a FANTASTIC free product, I suggest
getting this after you cleanup and keeping it updated as well....

And Assortment of Others:
http://spywareinfo.com/



Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://sourceforge.net/projects/spambayes/
or
Spamihilator.
http://www.spamihilator.com


Hope that helps...
 
G

Guest

I have the same problem w/about:blank - tried all that hijack/shredder stuff, said "not present" when it went by "about:blank" variant. Nothing so far has worked.....any MORE ideas

Thank
 
G

Guest

Download Hijack This http://www.spywareinfo.com/~merijn/downloads.htm

Please’ post your Hijack This Logs, in any of the following “Expert Forumsâ€
http://forums.tomcoyote.com/index.php?s=ee20672a32e5b13837eb98d5e43b840f&showforum=2
http://www.wilderssecurity.com/forumdisplay.php?f=2


----- Shenan Stanley wrote: ----

Steve Greer wrote
When I open IE6.0, my home page is always se
to "about:blank.
is somewhere on my machine. I've cleared every temporar
internet file and any questionable file I can find, but n
luck getting rid of the thing
times, and reset IE to default vaules, but my home page i
always this HiJacked "about:blank" when I re-open IE6.0
software. Nothing has found the culprit
htm is held, and how to restore same, I'd have some luck

Take the advice that has worked for most other spyware/adware/hijackers

You may have spyware/adware infesting your machine, follow th
appropriate section for that, making sure you use at leas
THREE of the tools I list to scan and clean your machine AFTE
updating them. Cleaning up spyware/adware/malware usuall
solves home page hijackers as well


Make sure you have all the updates (critical) installed from
http://windowsupdate.microsoft.com
(Scan for updates, Review and Install


Get rid of the spy/ad/mal-ware.
(Yes - using MORE than one of these.
I recommend at least the first three. Also.
UPDATE the definitions for them before using.

Spybot Search and Destro
http://www.safer-networking.net

Lavasoft AdAwar
http://www.lavasoft.d

CWSShredde
http://www.spywareinfo.com/~merijn/downloads.htm

Hijack This
http://mjc1.com/mirror/hjt

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard"
- http://www.moosoft.com
- http://www.javacoolsoftware.com

The first is a PAY product, but useable for 30 days - it has found an
eliminated problems in the past the others did not. The latter two ar
prevention mechanisms. I like SpywareGuard for those with enough processo
to have something running like antivirus software - and it prevents browse
hijacking quite well. SpywareBlaster is a FANTASTIC free product, I sugges
getting this after you cleanup and keeping it updated as well...

And Assortment of Others
http://spywareinfo.com



Empty your Temporary Internet Files and shrink the size it stores to abou
80 to 120MB (seems to be an optimal size for the normal user

- Open ONE copy of Internet Explorer
- Select TOOLS -> Internet Options
- Under the General tab in the "Temporary Internet Files" section
do the following
- Click on "Delete Cookies" (click OK
- Click on "Settings" and change th
"Amount of disk space to use:" to something between 80M
and 120MB. (Betting it is MUCH larger right now.
- Click OK
- Click on "Delete Files" and select t
"Delete all offline contents" (the checkbox) and clic
OK. (If you had a LOT, this could take 2-10 minutes o
more.
- Once it is done, click OK, close Internet Explore
- Re-open Internet Explorer


Uninstall any software you do not use often/ever. (If you have somethin
installed but never use it, uninstall it.) If you go through Contro
Panel -> Add/Remove Programs and see things you seldom if ever use, it is t
your advantage to remove it


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://sourceforge.net/projects/spambayes/
or
Spamihilator.
http://www.spamihilator.com


Hope that helps...
 
F

Frank Saunders, MS-MVP

DonS said:
I have the same problem w/about:blank - tried all that
hijack/shredder stuff, said "not present" when it went by
"about:blank" variant. Nothing so far has worked.....any MORE ideas?

Thank

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Home Page Hijacked! 2
Home page 1
Home page 9
Hijacked Web Page 3
Home Page 1
Hijacked Home Page URL 2
about:blank 9
Hijacked browser 3

Top