Spyware, viruses, & security forum: Removing the About:Blank Virus

Yep, that one is done that way - BUT - in the meantime there is also a SUPER HIDDEN file and that needs a different approach. I don't know IF it is a good idea everyone would remove "about:blanc" by themself. They have to KNOW what they are doing! I would still suggest the HJT forums of Computer Cops, Wilders, SWI - there are EXPERTS who ONLY do this "stuff" .

however, the procedure provided in the article seems clear and simple for me I did just a cold analysis and will keep a look for that registry key in the future.

In the real world I didn't encounter it [yet], although I cleaned other hijackers on novice PC users.

My post's intention was just to pass something interesting. Sometimes we need a little escape from all sorts of help cries

You're welcome, keep up the good work


Cetin


Trying to unweave, unwind, unravel
And piece together the past and the future,

T. S. Eliot

Ray,

yes, you can get rid of it.

You must have missed it

Please go to http://www.computercops.biz/downloads-file-328.html or
http://209.133.47.12/~merijn/files/HijackThis.exe or
http://www.mjc1.com/mirror/hjt/ or
http://downloads.net-integration.net/HijackThis.exe

and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log as a .txt file

Now go to one of the HJT forums:

http://www.computercops.biz/

http://forums.spywareinfo.com/

http://www.wilderssecurity.com/

and copy\paste that log into a new thread.

You could already help the guys\gals at the HJT forums by downloading:

"StartDreck", from here:
http://www.niksoft.at/download/frames.h...tdreck.htm

Unzip to its own folder and start the program,
Press 'Config'
Press 'Unmark All'
Check the following boxes only:
Registry -> Run Keys
System/drivers> Running processes
Press 'Ok'
Press 'Save' and select the location to save the log file
(default is the same folder as the application)

Post the log in the forum after you have posted your HJT log first.

I do NOT want to make it "complicater" as it is. It won't say much to you I guess, but you can find the hidden dll in there.

They'll tell you what to do.

Have a great day

Well Donna, regarding adding the Recovery Console option on HDD boot, I seem to recall that windows XP SP2 (future windows XP CD kits including SP2) won't allow to do it. I can't find the reference at hands now, but canceling it as option it's not a big deal .

You're welcome, keep up the good work


Cetin


Trying to unweave, unwind, unravel
And piece together the past and the future,

T. S. Eliot

Hi

Win 98 and winme do NOT have an AppInit DLL.

There is a different method - better you run HJT and post it either on the HJT forums of Computer Cops or Wilders.

HTH

HJT is a powerful tool and we have NO security experts in this forum - this way it is much better to post your HJT log in dedicated HJT forums like in SpywareInfo (SWI), Wilders and Computer Cops.

But be patient as ALL HJT forums are overwhelmed.