|
List Home > Operating System > Windows NT/2000/XP/2003 > [ Post New Problem ]
Welcome back !
| TrackingID : | 1823 |
| Posted : | Sunday, November 14th, 2004 03:24:42 AM |
| By : | sizzler |
| about:blank virus | Configuration: |
My homepage has been hijacked with about: blank virus for about three long weeks now. I have tried everything there is to remove it, but nothing works. It comes back just as soon as you delete the files with anything now. Also, a different about: blank pop-up window has been poping up, getting stuck, and forcing IE to shut down completely. I have been to forums and try to follow the advice given, such as different removal tools, but for some reason, (and i am pretty sure it has to do with this about: blank thing) IE on my computer will not alllow me to download anything that has to do with spyware removal, and if it does, none of the programs are able to connect to the internet and get the proper updates they need to function to their fullest ability. Is there a patch (hopefully) out there that i am oblivious to?
Does anyone out there know how to rid a computer system of such a parasite??
| Operating System : Microsoft Windows XP
|
Related Problems :
Comments :
Re: about:blank virus by Anonymous Ghost on November 14th, 2004 03:25:44 AM
You Have A Variant of the CoolWebSearch Trojan.
Please Download CWShredder and run the Program in safe mode . Press the "Fix Button" Let it fix all variants. Next, Close the program and all windows and IE windows and run hijackthis and Post a Fresh log.
Reboot to SAFE mode to run swshredder
How to start computer in safe mode
reboot computer and post a new log |
Re: about:blank virus by Anonymous Ghost on December 29th, 2004 02:21:44 PM
Try this:
Open your browser so you'll will see (automaticly) the startpage "about:blank"
Now go to the "view source" option of your browser. Look for a string that looks like:
res://%43%3a%5c (etc,), make a copy of this complete string (control c) and go to:
http://www.simplelogic.com/Developer/URLDecode.asp
Paste the string in here and press on "clean data".
Now a ***.dll file appears... Go to the directory where it's in (windows/system32) and activate "show hidden files" in this directory. Close all applications. Removing the dll file is not possible, but you can rename it, so do that! Than restart, and TADAA!
If you can't rename the file, disable your internet-connection!
To remove the complete file (after renaming) restart your computer in safe modus (during start up press down the F8-key).
Important! Also remove "msg.exe", "msgplus.exe" and/or "mslagent.exe" if they are listed in the System32 folder.
After doing all this, use Spybot, AdAware, Panda antivirus, etc, to clean up the rest.
Good Luck |
Re: about:blank virus by Anonymous Ghost on January 11th, 2005 10:59:31 AM
source page is
only |
Re: about:blank virus by Anonymous Ghost on January 16th, 2005 10:50:18 PM
The source code, URL Decoder method above worked well for me!
Thanks! |
Re: about:blank virus by Anonymous Ghost on August 25th, 2005 01:18:09 PM
I also ran into about:blank recently. The variation I hit threw a pop-up claiming to be a message from Microsoft firewall. It said there was "suspicious network activity" and offered to teach me more about virus activity (yes/no button and no "close window" option).
Well, I was suspicious -- of this message! I made sure not to hit either button. Instead, I opened the process list and killed what looked like an unwanted process. This closed the window without issue.
I tried using a few products to get rid of the problem. HijackThis! helped me find a lot of the problems, but they still returned every time I rebooted.
Eventually, I discovered that the virus had installed itself as a Windows service called "Network Security Service". The executable was at "c:\windows\msad.exe" . I killed the process, renamed the file, ran HijackThis! again to clean up the other files and registry entries, and rebooted. This fixed the problem.
I later edited the registry to remove the service. My system has been clean through a few reboots now. |
Related Problems :
List Home > Operating System > Windows NT/2000/XP/2003 > [ Post New Problem ] |
|
