Browser Hijacker Internet Explorer Search Page: abot:blank

  • Thread starter Thread starter Heinz Baumann
  • Start date Start date
H

Heinz Baumann

This Spyware ist detected, but cannot be removed.
it sets your Startpage to 'about:blank'
After removing by the AntiSpyware-Software it happens
again.
How can i remove this definitly ??
Thanks for feedback
 
This is a truly evil hijak - it took me many hours of
effort to remove it from a friend's PC, a few months ago.
Use another PC and Google to search for the solution - but
it involves registry editing and using safe-mode. Leave
out any step and it will come back. Basically, I think
that it uses a registry entry to activate a dll (rather
than the usual 'Run' registry entries.
If anyone deserves legal action for hacking then it is the
creator(s) of this. They are rumoured to study other
people's suggestions for fixes then they change their
hijack so that the fix won't work any more. Therefore, use
the latest avialable fix.

Dave R
 
Yes about:blank is very difficult to remove.

First, do a deep
system scan, if that does not find and remove it, boot
your system into safe mode.

Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options put a check next to /SAFEBOOT.

Reboot the computer, and log in as the admin.

Run the MSAS Beta1 with a Deep System Scan, reboot, and
run it again, continue this until MSAS does not find any
problems.

Once it comes up clean go to MSCONFIG again
Start>Run> (type MSCONFIG)>Go to the Boot.ini tab. Under
Boot Options take the check out of /SAFEBOOT.

Reboot your system into normal mode, open the MSAS and
click on Advanced Tools, Browser Hijacker Recovery, click
Check All, and Restore.

Next Click on Advanced Tools, Click on System Explorers,
to go IE Toolbars, anything that does not have a star,
block, then go to IE BHO's and do the same.

Go down to the Windows Hosts File, and the first one
should be 127.0.0.1 Local Host, if there is anything else
there remove it.

That should solve your problem.
 
Heinz Baumann said:
This Spyware ist detected, but cannot be removed.
it sets your Startpage to 'about:blank'
After removing by the AntiSpyware-Software it happens
again.
How can i remove this definitly ??
Thanks for feedback
Click to expand...


First, if you don't have WinXP SP2, get LSP-Fix - a free program to repair
damaged Winsock 2 stacks
http://www.cexx.org/lspfix.htm
save it because you might need to repair the Winsock 2 stacks after removing
the culprit.
For WinXP SP2 this command will restore the Winsock stacks if you can't
connect after clearing the malware.
Go to Start | Run and type
CMD
In the command window type
netsh winsock reset
Then get CWShredder
http://www.intermute.com/products/cwshredder.html

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
 
Back
Top