Hjt log file. about:blank virus

lagoon68 · May 12, 2005

My homepage has been hijacked by the about:blank virus.At first glance it appears as if it is a Microsoft webpage, but on closer inspection, it becomes evident that it is some type of "coolwebsearch." Furthermore pop ups are beginning to appear, claiming to be from microsoft; only to soon realise that they are not.Tried to change my homepage,surprise surprise-it didn't. Any help is very much appreciated.

1.Ran Norton and quarantined a couple of viruses.
2.Ran Adaware and deleted many entries, but same two appear after several scans: VX2 MALAWARE (process and regvalue).
3.Ran Spybot and deleted many entries, but as before some keep coming up. BackWebLite (has 56 entries) is one that I haven't deleted though because im not sure whether it is actuallly needed or not.
4.Ran Spysubtract and deleted various entries (Kazaa left behinds etc...)
5.In add/remove programs two new entries have appeared:
Shopping Wizard and Home Search Assistant. Which I cannot remove either.

Major Attitude · May 12, 2005

Please read the Announcement and sticky threads. No HijackThis logs are to be posted without them being requested. And there are guidelines for installing and using HijackThis. Standard cleanup procedures must be run first. Please follow the steps below.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

chuddds · May 12, 2005

your in the right place, majorgeeks.com, search, about blank !!!

Log in or Sign up

Hjt log file. about:blank virus

lagoon68 Private E-2

Attached Files:

hijack.txt

Major Attitude Co-Owner MajorGeeks.Com Staff Member

chuddds Private E-2