Possible recurrent about:blank problem

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by dolphinocean, Nov 6, 2005.

  1. dolphinocean

    dolphinocean Private E-2

    System: pentium III 550 MHz, 64 MB RAM, 15 GB HD, XP-Pro.

    Recently, my computer was very slow to boot (took 7 min) and programs also ran slow despite not having been on the computer for a few days with modem off the jack. And yesterday when I turned off the computer thru the proper procedure it just froze on me. It had to be manually turned off.

    This am while turning on computer, a message box notified me of Syagte firewall upgrade. During the download for the upgrade I noticed a quick flash of "about:blank" at the bottm of the toolbar followed several buttons for ads.

    I ran thru the sticky:"READ & RUN ME FIRST..." (10-31-05 version) and also the special procedure for about:blank and HSA Hijacker-simplified (10-27-05)version.

    Results:
    1. Ad-Aware: 6 non-critical objects, removed.
    2. CCleaner: cleaned. (instruction did not say update, but I updated).
    3. MSWin Antispy: no malware found.
    4. Spybot: No spyware/malware found.
    5. CWShredder: performed.
    6. Kill@me: performed.
    7. About:buster: AB1.txt and AB2.txt both clean.
    8. HS Remove: Result: 8 items removed. Removal complete.
    9. Bitdefender: performed, no problem found.
    Kaspersky: performed, no problem found.
    10. Trend Micro: performed, no virus found.
    11. TrojanScan: performed, no malware found.
    12. Panda: performed, no virus or malware found.

    HJT log file and about:bluster results attached.

    Your advice is much appreciated!
    3.
     

    Attached Files:

  2. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Scan and have HJT Fix the following:
    Do you know what this is?
    C:\Program Files\JUSearch\juspc.exe
     
  3. dolphinocean

    dolphinocean Private E-2

    Hi Shadow, thanks for your reply. I did the HJT scan and fixed acording to instruction except the following which was not found after the scan:

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm.

    New log attached.

    Regarding "C:\Program Files\JUSearch\juspc.exe" I have no idea what it is.

    I was wondering about this entry:R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=ZillaPop.

    The ZillaPop was a currupt file and was deleted long ago. Should we get rid of the entry?

    I've been bombarded with unsolicited ads and mine data tracking cookies while trying to upgrade new version of free Sygate firewall. Please warn others.
     

    Attached Files:

  4. dolphinocean

    dolphinocean Private E-2

    I found the answer for:
    C:\PROGRAM FILES\JUSEARCH\JUSPC.EXE

    Name: Juno Browser Search Enhancements, version 2.1.03
    United Online, Inc.
    Copyright © 1998-2004 United Online, Inc.
    Startup Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
     
  5. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Yes, you can fix R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=ZillaPop.

    Other than that your log looks fine. How is your computer running?
     
  6. dolphinocean

    dolphinocean Private E-2

    My computer is now running fine. I also downloaded Spyware Guard for extra protection. Thanks a lot Shadow!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds