about blank - please help

Discussion in 'Malware Help (A Specialist Will Reply)' started by petr, May 26, 2005.

  1. petr

    petr Private E-2

    Hi guys, apologies I am new to this site & don't know much about computers. I am trying to get rid of "about:blank" stuff. Could you help?

    I've read "Read me First before..." and tried to follow it. I couldn't get into the safe mode. I did check for Network Security Service" or "Workstation Netlogon Service" or "Remote Procedure Call (RPC) Helper" but haven't found any.

    I ran Ad-Aware SE,Ad-Aware VX2 Cleaner Plug-In, Spybot, SpywareBlaster,
    McAfee AVERT Stinger, CWShredder, Kill2me, about:Buster, HSRemove.


    Norton 93 found a Bloodhound W32.EP virus - hasn't been able to remove it. When I updated definitions it cannot find it anymore. It is still there - file "shnlog.exe" - cannot delete it.

    SpyDoctor has removed NewDotNet, VirtualMaid, Aureate or Radiate, FlashGet.

    Remove About Blank Buddy found:
    Browser Helper Objects: windows/system32/hp6AC1.tmp.
    Blank page for "about protocol" : res://mshtml.dll/blank.htm
    Handler for about protocol: %SystemRoot%/system32/mshtml.dll
    From blank about I redirected to: "startsearches.net"

    Could you help?
     
  2. jeff6303j

    jeff6303j Private E-2

    Which OS are you running? Is there specific reason why safe mode will not work for you? If the F8 just is not working, you can also try to follow this link to go to for info on starting in safe mode and a different way than just pressing F8 if you have certain OS. Let me know which OS and ill try to help.
    http://service1.symantec.com/SUPPOR...src=sec_doc_nam

    if you need any more help let me know.

    thnx

    gl hf
     
  3. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    petr,

    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds