Looking for general info on the about:blank hijack

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by da chicken, Jul 2, 2004.

  1. da chicken

    da chicken MajorGeek

    Not a person who's suffering, but I'm looking to learn as much as I can about this one. I'm wondering if anyone knows how it works (infects), what it changes, and why it's so bad to get rid of.

    I really like'd MA's sticky on the res://<random>.dll... kind of looking for information to that extent so that I know how to handle the problem whn it comes up in the future.

    Any personal experiences or links would be great!

    TIA
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I just posted one possible solution to this in this thread: http://www.majorgeeks.com/vb/showthread.php?t=36043

    I have used procedures similar to that multiple times. This about:blank problem can appear similar to the one in the sticky but they are much different. The about blank problem quite often uses AppInit_DLLs in WinXP and Win2K systems to hide the hijacker DLL. This causes it to come back after you think you have fixed it using HijaakThis by just fix the appropriate R0 & R1 lines. It is also similar to the "Only The Best" hijacker in that it will quite often mutate and change file names upon reboot or when you attempt to fix it. Sometimes when people have attempt inadequate partial fixes to both of these problems, they become more difficult to fix. And sometimes you can no longer even see the expect R0 & R1 lines even though the bug is still there. Quite a pain in the ass.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds