Why is ABOUT:BLANK listed in these files?

E

Edw. Peach

"Should" the term 'about:blank' be found in the following files? I am
having an issue with an about:blank screen and did a search on my HD
for the text, about:blank and found that it shows up in all these
files/folders. I bought this computer Nov. 03 and some of the
modified dates precede that.



NAME: ACTSHELL
LOCATION: C:\I386 folder
SIZE: 88 KB
TYPE:HTM File.
MODIFIED: 8/29/2002

NAME: MIGRATE
LOCATION: C:\I386 folder
SIZE: 24 KB,
TYPE: JScript Script File
MODIFIED: 8/29/2002

NAME: ACTSHELL
LOCATION: C:\WINDOWS\$NtServicePackUninstall$
SIZE: 88 KB
TYPE:HTM File.
MODIFIED: 8/29/2002

NAME: MIGRATE
LOCATION: C:\WINDOWS\$NtServicePackUninstall$
SIZE: 24 KB,
TYPE: JScript Script File
MODIFIED: 8/29/2002

NAME: ACTSHELL
LOCATION: C:\WINDOWS\ServicePackFiles\i386
SIZE: 88 KB
TYPE:HTM File.
MODIFIED: 8/4/2004

NAME: MIGRATE
LOCATION: C:\WINDOWS\ServicePackFiles\i386
SIZE: 24 KB,
TYPE: JScript Script File
MODIFIED: 8/4/2004

NAME: smartnav
LOCATION: C:\WINDOWS\ServicePackFiles\i386
SIZE: 9 KB
TYPE JScript Script File
MODIFIED: 2/20/03

NAME: actshell
LOCATION: C:\WINDOWS\System32\OOBE
SIZE: 88KB
TYPE: HTM FIle
MODIFIED: 8/4/04

NAME: migrate
LOCATION: C:\WINDOWS\System32\OOBE
SIZE: 24KB
TYPE: JScript Script File
MODIFIED: 8/4/04

NAME: component
LOCATION: C:\Program Files\Hewlett-Packard\hp deskjet assistant\bin
SIZE: 274 KB
TYPE: JScript Script File
MODIFIED: 12/29/03

NAME: bsschdht2
C:\Program Files\MusicMatch\MusicMatch Jukebox\Html\Help
SIZE: 35 KB
TYPE: JScript Script File
MODIFIED: 8/14/02

NAME: bsschdhtm
C:\Program Files\MusicMatch\MusicMatch Jukebox\Html\Help
SIZE: 72 KB
TYPE: JScript Script File
MODIFIED: 8/14/02

NAME: smartnav
LOCATION: C:\Windows\ServicePack Files\i386
SIZE: 9 KB
TYPE: JScript Script File
MODIFIED: 2/20/03

NAME: SmartNav
LOCATION: C:\WINDOWS\MicrosoftNET\Framework\v1.1.4322\ASP.NET
ClientFiles
SIZE: 9KB
TYPE: JScript Script File
MODIFIED: 2/20/03
 
W

Wesley Vogel

about: blank is either your Internet Explorer home page or you have been
hijacked.

Start | Run | Type: inetcpl.cpl | OK |
General tab | The use Blank button creates the about: blank home page.

If you did not do this on purpose, you probably have CWS about: blank
hijacker.

Run CWShredder first!!!

First. Make sure of these settings and nothing will install without you
answering YES. (Except what may install as part of some other software.)
Don't click YES if you don't know/trust the source.

Start | Settings | Control Panel | Internet Options | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]

 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
particular task.]]

Apply | OK

 Enable Install On Demand (Other)
Is part of the driveby downloading of unwanted programs. i.e. Scumware or
whatever will install w/o you even being aware of it.
=====

Second. If you need a scan right now.

Follow the instructions!
THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.php

=====

Third.
It is known as scumware. Visit these sites. 1, 2, 3 and 4 are really good.
Download, install, run, update and run again; one or all. They are all
good, FREE utilities. Make sure you update every program, even if you
just downloaded it. You must have the latest updates. Without updates,
you have a gun without ammo.

1) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

2) SpywareBlaster
[[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
ever being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.]]
http://www.javacoolsoftware.com/spywareblaster.html

3) Spybot S & D (More for the advanced user)
http://www.safer-networking.org/index.php?lang=en&page=download

4) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/downloads.html

4a) HijackThis (direct download)
http://aumha.org/downloads/hijackthis.zip

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html?source=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) Ad-aware SE Personal
http://www.lavasoft.de/support/download/

=====

MVPS HOSTS file is a free download from:
http://www.mvps.org/winhelp2002/

Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

=====

Problems uninstalling? Here's some advice.
http://www.kephyr.com/spywarescanner/uninstallproblems.phtml

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Dealing with Unwanted Spyware and Parasites
http://mvps.org/winhelp2002/unwanted.htm

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315

Spyware and Deceptive Software
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx?gssnb=1

What you should know about spyware
http://www.microsoft.com/security/articles/spyware.asp

Cleaning Up XP
http://www.kellys-korner-xp.com/xp_c.htm#cleanup
 
E

Edw. Peach

Thanks for the in-depth information. I am copying this down and will
investigate it later today when I have more time.

I keep getting clean reports from the various programs and services
I've tried (Ad-Aware, SpyBot S&D, CW Shredder, and the online check
you listed in the message to which I am responding) but I definitely
have the text "about:blank" in the files I noted at the beginning of
this thread.

I have a theory about why I'm getting confused messages on this. Tell
me if this is a possibility.

I don't use IE or OE as my default browser or email program. I do use
XP and various MS Office products. Because I do not use the OS and
email program that are the target of these nasties, could the 'take
over' or 'hijack' be less than complete? Wherever I got this
about:blank, I wasn't using IE when I did. Also, I have a firewall
and have IE on an 'ask' basis, though I do not recall IE wanting to
access the Internet at any time that seemed inappropriate (like when
I'm using it, or updating Windows, etc.)

Is it possible that the proper links are just not there to make the
about:blank effective? I do have ONE situation that alerts me to the
fact I have a problem...when I do hit a link to the internet from my
email program (Eudora), two Foxfire windows open for the intended
address, plus an IE brower with the blank about:blank page. The
source on that only says "<HTML> </HTML>.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top