I. E. Home Page always changes to "about blank"

[Guest]

"about blank" is always the home page even after I set it
back to the default setting of MSN. Quite often it will
load a second page called aifind... search screen which I
dont believe is a legitimate web site. I have installed
all my windows updates to rectify the situation but this
problem persists for my profile in XP. How do I resolve
this?

 

[Alan Edwards]

Have you tried CWShredder?
CoolWebSearch
http://www.spywareinfo.com/~merijn/cwschronicles.html#aboutblank

....Alan

 

[Guest]

Yes I have tried this several times and it didn't work!

 

[H Leboeuf]

The: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html


If all fails, see if you have a new variant.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

====
The HijackThis forum may be under DOS attacks so use one of these.

Please' post your Hijack This Logs, in any of the following "Expert Forums"
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.net-integration.net/index.php?s=853f186bf90302d57a6840f00475ff6b&showforum=32
http://forums.spywareinfo.com/index.php?s=1413794b9fe306155560c99576acc3a8&showforum=11
http://www.lavasoftsupport.com/index.php?s=c0d583c0e136d2133506ec492cb6bd40&showforum=44
http://www.cybertechhelp.com/forums/forumdisplay.php?f=19
http://boards.cexx.org/viewforum.php?f=1&sid=0b5c7c42dc70e12ffe32f4a0807ff6a3
http://www.dslreports.com/forum/security,1

 

[Guest]

Thanks for the info... I have posted my logs under the
name CAMBAM. I've noticed some people have had success
with using reglite and following the guide... where can
it be downloaded from?

-----Original Message-----
The: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html


If all fails, see if you have a new variant.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/h ijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

====
The HijackThis forum may be under DOS attacks so use one of these.

Please' post your Hijack This Logs, in any of the following "Expert Forums"
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.net-integration.net/index.php? s=853f186bf90302d57a6840f00475ff6b&showforum=32

http://forums.spywareinfo.com/index.php?

s=1413794b9fe306155560c99576acc3a8&showforum=11

http://www.lavasoftsupport.com/index.php?

s=c0d583c0e136d2133506ec492cb6bd40&showforum=44

http://www.cybertechhelp.com/forums/forumdisplay.php?f=19
http://boards.cexx.org/viewforum.php?

f=1&sid=0b5c7c42dc70e12ffe32f4a0807ff6a3
http://www.dslreports.com/forum/security,1

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Yes I have tried this several times and it didn't work!
http://www.spywareinfo.com/~merijn/cwschronicles.html#abo set
it which
I

.

 

[H Leboeuf]

You may have a look at this article.
This malware is getting worst by the minute.

If About:Blank is still coming back, follow this link.
http://www.daniweb.com/techtalkforums/thread5531.html
--

As for RegLite do not know. Search the web.

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Thanks for the info... I have posted my logs under the
name CAMBAM. I've noticed some people have had success
with using reglite and following the guide... where can
it be downloaded from?

-----Original Message-----
The: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html


If all fails, see if you have a new variant.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/h ijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

====
The HijackThis forum may be under DOS attacks so use one of these.

Please' post your Hijack This Logs, in any of the following "Expert Forums"
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.net-integration.net/index.php? s=853f186bf90302d57a6840f00475ff6b&showforum=32

http://forums.spywareinfo.com/index.php?

s=1413794b9fe306155560c99576acc3a8&showforum=11

http://www.lavasoftsupport.com/index.php?

s=c0d583c0e136d2133506ec492cb6bd40&showforum=44

http://www.cybertechhelp.com/forums/forumdisplay.php?f=19
http://boards.cexx.org/viewforum.php?

f=1&sid=0b5c7c42dc70e12ffe32f4a0807ff6a3
http://www.dslreports.com/forum/security,1

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Yes I have tried this several times and it didn't work!
-----Original Message-----
Have you tried CWShredder?
CoolWebSearch
http://www.spywareinfo.com/~merijn/cwschronicles.html#abo
utblank

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windows.inetexplorer.ie6.browser,

"about blank" is always the home page even after I set
it
back to the default setting of MSN. Quite often it will
load a second page called aifind... search screen which
I
dont believe is a legitimate web site. I have installed
all my windows updates to rectify the situation but
this
problem persists for my profile in XP. How do I resolve
this?

.

.

 

[Guest]

Yes I see what you mean. I did download the RegLite but
my situation is different than someone who had used it
with success for a quick fix! I'm just going to be
patient and hope someone reviews my posted logs and can
walk me thru it. Thanks again for your help!

-----Original Message-----
You may have a look at this article.
This malware is getting worst by the minute.

If About:Blank is still coming back, follow this link.
http://www.daniweb.com/techtalkforums/thread5531.html
--

As for RegLite do not know. Search the web.

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Thanks for the info... I have posted my logs under the
name CAMBAM. I've noticed some people have had success
with using reglite and following the guide... where can
it be downloaded from?

-----Original Message-----
The: Complete list by variant with up-to-date information.
http://www.spywareinfo.com/~merijn/cwschronicles.html


If all fails, see if you have a new variant.

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:

http://216.180.252.218/~spywareinfo.com/downloads/tools/h

ijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will

change
into a "Save Log"

button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the

results
or the .log file.

http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

====
The HijackThis forum may be under DOS attacks so use

one
of these.

Please' post your Hijack This Logs, in any of the following "Expert Forums"
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.net-integration.net/index.php? s=853f186bf90302d57a6840f00475ff6b&showforum=32
s=1413794b9fe306155560c99576acc3a8&showforum=11
s=c0d583c0e136d2133506ec492cb6bd40&showforum=44
http://www.cybertechhelp.com/forums/forumdisplay.php? f=19
http://boards.cexx.org/viewforum.php? f=1&sid=0b5c7c42dc70e12ffe32f4a0807ff6a3
http://www.dslreports.com/forum/security,1

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===
Yes I have tried this several times and it didn't work!
-----Original Message-----
Have you tried CWShredder?
CoolWebSearch

http://www.spywareinfo.com/~merijn/cwschronicles.html#abo

utblank

....Alan

--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windows.inetexplorer.ie6.browser,

"about blank" is always the home page even after I set
it
back to the default setting of MSN. Quite often it will
load a second page called aifind... search screen which
I
dont believe is a legitimate web site. I have installed
all my windows updates to rectify the situation but
this
problem persists for my profile in XP. How do I resolve
this?

.


.

.