about:blank

Discussion in 'Malware Help (A Specialist Will Reply)' started by Patricia Howard, Jun 19, 2005.

  1. Patricia Howard

    Patricia Howard Private E-2

    I had many spywares, viruses, trojans, etc. etc. I ran everything on the READ ME FIRST page according to directions. Then I ran the extras... including the 3 online scans. After everything was run, I started at the beginning again. Ran whole page, but not ADS, also not Trend Micro (for 2 days it won't run on my computer...get error). Everything gave me a clean bill of health. Thank you so much for fantastic self help tools.

    But in MIE Tools, Internet Options, about:blank is my default start page. It will not delete or be replaced. In fact, when apply is clicked, it pops back in as default. Once, after trying to delete, it popped up as a browser.
    It can be replaced, though. I ran about buster several times, regular and safe mode. Says I'm ok now. How do I get this insidious thing out of my default? Or am I ok as everything says?
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. Patricia Howard

    Patricia Howard Private E-2

    My computer will not run HJT. I get a large white error screen when I try to open it by double clicking the icon. It has an option to ignore and keep working. This option doesn't work. All I can do is close which brings up the illegal operation message. I downloaded to C\Program Files\HJT and unzipped with WinZip. Tried to run from that folder. All windows closed but Windows Explorer where HJT file folder I downloaded from all your download sites. All tries to run resulted in white screen. Had an old copy of HJT on a backup cd. It also produced a white screen. Don't know if this is related, but since I've been on computer, get periodic same white screen popups for a2upd. I just now had a thought and checked cookies. The person who caused this mess has been porn surfing today. I'll clean things up AGAIN, and if I still have about:blank HJT will hopefully work, and I'll post. So sorry to waste your time.
     
  4. Patricia Howard

    Patricia Howard Private E-2

    I rescanned everything after HJT would not work (previous reply), as the first time. Everything clean, nothing new. HJT worked. about:blank is still my default browser. Log file attached. Thanks.
     

    Attached Files:

  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and Check the Boxes for the following:

    Make sure All Browser Windows are Closed when you Click FIX.

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

    R3 - Default URLSearchHook is missing

    O2 - BHO: (no name) - {D3F6DEA9-16C8-F987-B77A-9C3AD10F9541} - (no file)

    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

    O16 - DPF: {D8A8A7F1-53EF-41F2-B44D-F3E2E595DC27} - ms-its:mhtml:file://C:\MAIN.MHT!http://69.50.172.102/336//main.chm::/update.exe

    Again, make sure All Browser Windows are Closed when you Click FIX.

    NEXT:
    Run CCleaner and Spybot S&D and have Spybot fix what it finds.
    Note: Dont forget to update Spybot S&D by selecting "Search For Updates"

    Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
    Temporary Files
    Temporary Internet Files
    Recycle Bin


    And Click OK.


    After you complete ALL of the above REBOOT, Scan with HijackThis and attach the new log.
     
  6. Patricia Howard

    Patricia Howard Private E-2

    Thanks so much.
     

    Attached Files:

    Last edited: Jun 21, 2005
  7. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Patricia Howard,

    Your HJT log is clean, are you having any further problems?
     
  8. Patricia Howard

    Patricia Howard Private E-2

    MIE Tools, Internet options:
    Use Default=???
    Use Blank=about:blank

    The "black plague" moved to blank. Computer hasn't been used for surfing.
    Thanks
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Copy the contents of the Quote Box below to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fix.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.)

    Double-click on the fix.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to merge, click YES!


    After you complete the above reboot and let me know if any problems remain.
     
  10. Patricia Howard

    Patricia Howard Private E-2

    Same problem. about:blank in Use Blank. Won't delete. Use Default=???
    Thanks.
     
  11. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I dont guess I understand what your saying, the actual button displays:
    Use Default=???

    Can you take a snapshot of this and attach it to your post?
     
  12. Patricia Howard

    Patricia Howard Private E-2

    Sorry it's taken me so long to reply. I've decided to get along as my computer is until my husband gets another computer again, and I'm the only one who uses mine. He does not surf or email carefully, and it does no good to fix it when it continues to be at risk for picking up trash. Thank you so much for your help. I'll be back when I own my computer again.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds