About:Blank problem

Discussion in 'Malware Help (A Specialist Will Reply)' started by vishoka, Apr 2, 2006.

  1. vishoka

    vishoka Private E-2

    I have done all of the steps in the "read this first" and did all the steps in the malware removal section and HSRevmove and about:buster. Still having problem. Attaching logs from Hijackthis and about:blaster.

    My computer is a Dell 3000. 3 GHz processor, 512 MB RAM, Windows XP, SP2
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    You need to attach the two logs requested in step 6 of the READ & RUN ME.

    Note:You do not have an about:blank hijacker issue. Please explain your exact problems and why you think you have about:blank.
     
  3. vishoka

    vishoka Private E-2

    The two files I think you want are attached. When I close an IE window, an about:blank IE window opens that is blank. When I try to close this, another about:blank window opens. More about:blank windows will open if I try to close an about:blank window. It becomes impossible to close the original browser. IE then hangs and the only way I can stop the whole process is to use task manager to end the program. It does not happen when I use MSN browser.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I still do not see any major issues that would point to a browser hijacker problem. Unless you have some totally new unknown form. Let's fix a few minor things and perform a couple other steps:

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
    O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} (Java Plug-in) -
    O16 - DPF: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} (Java Plug-in) -

    After clicking Fix, exit HJT.
    Now we need to Reset Web Settings:
    1. If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
    2. Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
    3. If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.
    Now download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program
    Now run the below procedure and attach the spysweeper.txt log:

    Running Spy Sweeper

    Now reboot in normal mode and post a new HJT log.
    Make sure you tell me how things are working now.
     
  5. vishoka

    vishoka Private E-2

    At the end of you post you say to reboot in normal mode, but I cannot find a place where you say reboot in safe mode. I wanted to be clear on this before I took the steps you recommended.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I just wanted you to reboot again into normal mode. I know you were not in safe mode but I wanted to make sure you rebooted from whatever mode you are in at the time into normal mode before giving me a new HJT log.
     
  7. vishoka

    vishoka Private E-2

    Attached are the two files you requested. The about:blank window still opens when I try to close IE.
     

    Attached Files:

  8. vishoka

    vishoka Private E-2

    I may have been wrong about the problem continuing. I will keep opening and closing multiple IE windows to verify. I will let you know.
     
  9. vishoka

    vishoka Private E-2

    Grrrrrrrrrr.... After several test runs I have found that:

    IE either doesn't launch from existing icons or takes a minute or so to launch. It then tends to hang the computer. For a time, Outlook express displayed similar problems. For the moment, that program seems to be launching OK. I DID get IE to generate about:blank windows.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your problems do not appear to be malware related! You should look for support in the Software Forum. You have quite alot of stuff running and perhaps some of it is causing you some problems. Even having a firewall misconfigured can cause problems something like you are mentioning.

    However here are some other observations, it's your decision what you want to do.
    1. I personally would not recommend having the software you have from Symantec installed at the same time as McAfee.
    2. Also personal preference, I would not use either McAfee or Symantec for your protection since they can be tremendous resource hogs.
    3. Uninstall Microsoft Antispyware. You do not need it since you now have Windows Defender which is the current program Microsoft supoorts.
    4. Uninstall Spy Sweeper now that you did a cleaning with it. You do not need it or want it to stay running at the same time as Windows Defender.
    Also note, you never fixed the items I asked you to fix in message # 4.
     
  11. vishoka

    vishoka Private E-2

    RE: you last post. I uninstalled Spysweeper and Microsoft antispyware. I haven't decided what to do about The McAfee and Symantec software yet. I could use a suggestion about what antivirus/antispyware you would recommend. I do have Spybot and Adaware on my system. I am not sure which problems in message #4 you were referring to.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Depends somewhat on you. Do you like McAfee or Symantec and do you want to use them? The main point is that only use software from one of them, not both of them. Personally we do not recommend them since they can be massive resource hogs. What we recommend is starting with the free ones listed in the below link and if you like them, you can always upgrade to the pay versions for more features and support.

    How to Protect yourself from malware!

    I'm referring to fixing the lines given with HijackThis and the running of Hoster. You never commented on whether you even did this. And the HJT log in message # 7 indicated you did not run those steps.
     
  13. vishoka

    vishoka Private E-2

    I did run Hoster and HJT and fixed the lines they found. I wonder if I sent you the wrong HJT log.
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well then check your HJT log right now yourself and make sure all of those lines have been fixed. You must make sure no browsers are running before you click fix or the fix may not work. Also you must make sure that no spyware tools are blocking the fixes.

    Then make sure you have uninstall all of the Symantec stuff.

    Now post a new HJT log after making sure you have fixed those lines.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds