i have run all the spyware removers, but still have the aboutblank hijacker. please 
help

Tip: Run a free scan for common Windows errors ad

re: aboutblank Monday, November 21, 2005 at 6:45 pm Posted by Jeff (957 messages posted) Scan for spyware while in safemode. (Press F8 while PC boots up) Delete all temp files, temporary Internet files, cookies, etc. Try SpySweeper at webroot.com. (Get updates when asked) Jeff On Monday, November 21, 2005 at 5:57 pm, Dennis wrote: >i have run all the spyware removers, but still have the aboutblank hijacker. please >help [Reply or follow-up to this message] re: aboutblank Monday, November 21, 2005 at 6:52 pm Posted by MrCharlie (4141 messages posted) There's 4 different AboutBlanks, to see which one you have: Lets see what's on your system, download HiJackThis from ThisLink into its own permanent folder, double click on it to open it up, hit the scan and save log button, it will be saved in the folder, copy and paste that into your reply. Please make sure you check the "preserve spacing button" on the bottom of the posting page. MrC [Reply or follow-up to this message] re: aboutblank Monday, November 21, 2005 at 7:19 pm Posted by Wy (586 messages posted) What's "all" the spywares? Having encountered the about:blank problem myself a few times, any one of the following [depending on which variant it is but it's best to have all of the following] will fix the problem: A-squared [anti-malware/trojan program] - www.emsisoft.com - get the FREE version, not the Personal one, you'll have to register your email address to get the activation code. Ad-Aware [free] - www.download.com Spybot [free] - www.download.com Spyware Blaster [free] - www.download.com Spy Sweeper [fully functional trial version] - www.webroot.com Update each before running them, and best to run them with no other running programs or in safe mode. On Monday, November 21, 2005 at 5:57 pm, Dennis wrote: >i have run all the spyware removers, but still have the aboutblank hijacker. please >help [Reply or follow-up to this message] re: aboutblank Tuesday, November 22, 2005 at 4:38 am Posted by MartinM (5115 messages posted) Just in passing, Spy Sweeper screwed up my 98SE PC. Had to uninstall and go back to an earlier Registry copy. No probs with any of the others. [Reply or follow-up to this message] re: aboutblank Tuesday, November 22, 2005 at 5:36 am Posted by Wy (586 messages posted) Just in passing, how did Spy Sweeper screw up your Windows? I run it regularly and have had no problems with it myself. On Tuesday, November 22, 2005 at 4:38 am, MartinM wrote: >Just in passing, Spy Sweeper screwed up my 98SE PC. Had to uninstall and go back >to an earlier Registry copy. > >No probs with any of the others. [Reply or follow-up to this message] re: aboutblank Tuesday, November 22, 2005 at 9:12 am Posted by Jeff (957 messages posted) Same here. I've used it on many different machines with different hardware and OS's without any problems. Jeff On Tuesday, November 22, 2005 at 5:36 am, Wy wrote: >Just in passing, how did Spy Sweeper screw up your Windows? I run it regularly and >have had no problems with it myself. > > > [Reply or follow-up to this message] re: aboutblank Wednesday, November 23, 2005 at 2:30 am Posted by Ed (659 messages posted) In my experience, spyware typically hides in "C:\WINDOWS\Downloaded Program Files". I always look there first. Each entry in the system folder "Downloaded Program Files" is generated by an .INF file in that directory. All the files themselves are hidden, because it is a special system folder (which makes it ideal for hiding things in). To view the files, boot in DOS mode from a floppy. There may be spyware, virus files, or diallers concealled there, as this is where Windows first puts downloaded program files, so is the most likely place for spyware (or a virus) to be. The DOS command is: DIR *.* /A /S /P /-W Switches: /A = show All files (including hidden and system files) /S = show files in Sub-directories too /P = Pause between each screenful of information /-W = do not use Wide mode Look for any new files, eg a file with a very recent date. There should be one .INF file (seen in DOS mode) for each valid entry under Windows, and should be NO sub-directories. The rogue .INF files are easy to root out. In DOS mode, booting from a floppy, they can be deleted. A hidden or system file can be deleted under DOS. But you must first remove the hidden and system attributes with the command: ATTRIB -R -A -S -H *.INF /S Ed [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 7:16 am Posted by Dennis (10 messages posted) here is a copy of the log. Scan saved at 8:57:05 AM, on 11/24/05 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTSMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTPSPD.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\ESSOLO.EXE C:\IBMTOOLS\APTEZBTN\APTEZBP.EXE C:\CSAFE\AUTOCHK.EXE C:\WINDOWS\SYSTEM\HPZTSB09.EXE C:\PROGRAM FILES\HEWLETT-PACKARD\HP SOFTWARE UPDATE\HPWUSCHD.EXE C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOTDD01.EXE C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE C:\WINDOWS\SYSTEM\QTTASK.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE C:\PROGRAM FILES\COMMON FILES\AOL\AOL SPYWARE PROTECTION\AOLSP SCHEDULER.EXE C:\PROGRAM FILES\WASHER\WASHER.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NSCHED32.EXE C:\PROGRAM FILES\COMMON FILES\AOL\1132530670\EE\AOLHOSTMANAGER.EXE C:\PROGRAM FILES\COMMON FILES\AOL\1132530670\EE\AOLSERVICEHOST.EXE C:\MY DOCUMENTS\HIJACKTHIS.EXE R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [ESSOLO] ESSOLO.EXE O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [AEZBProc] c:\ibmtools\aptezbtn\aptezbp.exe O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET O4 - HKLM\..\Run: [ConfigSafe] C:\CSAFE\AUTOCHK.EXE O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb09.exe O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "c:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [DeviceDiscovery] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1132530670\EE\AOLHostManager.exe O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe" O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKLM\..\RunServices: [AOL TopSpeedMonitor] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE" O4 - HKCU\..\Run: [Washer] C:\Program Files\Washer\washer.exe /0 O4 - Startup: Norton Program Scheduler.lnk = C:\Program Files\Norton AntiVirus\NSCHED32.EXE O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll O12 - Plugin for .mpeg: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .wmv: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll O12 - Plugin for .asx: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com O16 - DPF: {11111111-1111-1111-1111-111111113458} - file://C:\WINDOWS\Tempor~1\Content.IE5\JWLSE3M8\explorer9[1].cab On Monday, November 21, 2005 at 6:52 pm, MrCharlie wrote: > >There's 4 different AboutBlanks, to see which one you have: > >Lets see what's on your system, download HiJackThis from ThisLink >into its own permanent folder, double click on it to open it up, hit the scan and >save log button, it will be saved in the folder, copy and paste that into your reply. > >Please make sure you check the "preserve spacing button" on >the bottom of the posting page. > > MrC > [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 7:41 am Posted by MrCharlie (4141 messages posted) The log look pretty good. You haven't said what you have done so far. I suspect you had the res://C:\WINDOWS\TEMP\se.dll/spage.html startpage trojan horse on the system - but don't see if now. Close ALL programs down, leaving ONLYHijackThis running - Click Scan and..... Place a check against the following items: R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = O16 - DPF: {11111111-1111-1111-1111-111111113458} - file://C:\WINDOWS\Tempor~1\Content.IE5\JWLSE3M8\explorer9[1].cab Click on Fix Checked and exit HijackThis. Download and install CleanUp! Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu). Set the program up as follows: Click "Options..." Move the arrow down to "Custom CleanUp!" Put a check next to the following (Make sure nothing else is checked!): >>Empty Recycle Bins >>Scan Local Drives for Temp files >>Click OK >>Press the CleanUp! button to start the program. Then.... Open up Internet Explorer , Tools, General Tab, reset your home page to what you want, now the Programs Tab, click Reset Web Settings That will change everything back to the default settings. Reboot and post a fresh HJT log and lets see how we did, MrC [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 9:29 am Posted by Dennis (10 messages posted) it is still showing aboutblank on my internet properties home page and now my computer want shut down On Thursday, November 24, 2005 at 7:41 am, MrCharlie wrote: > >The log look pretty good. You haven't said what you have done so far. >I suspect you had the res://C:\WINDOWS\TEMP\se.dll/spage.html startpage trojan >horse on the system - but don't see if now. > >Close ALL programs down, leaving ONLYHijackThis running - Click Scan >and..... >Place a check against the following items: > >R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = >R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = >O16 - DPF: {11111111-1111-1111-1111-111111113458} - file://C:\WINDOWS\Tempor~1\Content.IE5\JWLSE3M8\explorer9[1].cab > >Click on Fix Checked and exit HijackThis. > >Download and install CleanUp! > >Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All >Programs menu). >Set the program up as follows: >Click "Options..." >Move the arrow down to "Custom CleanUp!" >Put a check next to the following (Make sure nothing else is checked!): >>>Empty Recycle Bins >>>Scan Local Drives for Temp files >>>Click OK >>>Press the CleanUp! button to start the program. > >Then.... > >Open up Internet Explorer , Tools, General Tab, reset your home page to what you >want, now the Programs Tab, click Reset Web Settings >That will change everything back to the default settings. > > >Reboot and post a fresh HJT log and lets see how we did, MrC > [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 9:33 am Posted by Jeff (957 messages posted) Have you deleted all temp files and cookies? Have you downloaded and installed SpySweeper from webroot.com and downloaded the updates when asked? Have you done a full system scan in safe mode with SpySweeper and deleted all traces found? Jeff On Thursday, November 24, 2005 at 9:29 am, Dennis wrote: >it is still showing aboutblank on my internet properties home page and now my computer >want shut down > > > [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 10:03 am Posted by MrCharlie (4141 messages posted) What does this mean: "it is still showing aboutblank on my internet properties home page" There is an aboutblank setting for IE. Open up IE Tools > Internet Options > Home Page You mean you can't change that? Please post a fresh HJT log as I asked. MrC [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 10:37 am Posted by MrCharlie (4141 messages posted) If the computer won't shut down, hit the reset button and let it reboot - ccleaner may have caused this to happen. The post a fresh HJT and lets see if the AboutBlank hijacker shows. MrC [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 10:43 am Posted by Dennis (10 messages posted) Logfile of HijackThis v1.99.1 Scan saved at 12:38:57 PM, on 11/24/05 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTSMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTPSPD.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\ESSOLO.EXE C:\IBMTOOLS\APTEZBTN\APTEZBP.EXE C:\CSAFE\AUTOCHK.EXE C:\WINDOWS\SYSTEM\HPZTSB09.EXE C:\PROGRAM FILES\HEWLETT-PACKARD\HP SOFTWARE UPDATE\HPWUSCHD.EXE C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOTDD01.EXE C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE C:\WINDOWS\SYSTEM\QTTASK.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE C:\PROGRAM FILES\COMMON FILES\AOL\AOL SPYWARE PROTECTION\AOLSP SCHEDULER.EXE C:\PROGRAM FILES\WASHER\WASHER.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NSCHED32.EXE C:\PROGRAM FILES\COMMON FILES\AOL\1132530670\EE\AOLHOSTMANAGER.EXE C:\PROGRAM FILES\COMMON FILES\AOL\1132530670\EE\AOLSERVICEHOST.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\SYSTEM\RNAAPP.EXE C:\WINDOWS\SYSTEM\TAPISRV.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\PROGRAM FILES\AMERICA ONLINE 9.0\WAOL.EXE C:\PROGRAM FILES\AMERICA ONLINE 9.0\SHELLMON.EXE C:\MY DOCUMENTS\HIJACKTHIS.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [ESSOLO] ESSOLO.EXE O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [AEZBProc] c:\ibmtools\aptezbtn\aptezbp.exe O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET O4 - HKLM\..\Run: [ConfigSafe] C:\CSAFE\AUTOCHK.EXE O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb09.exe O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "c:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [DeviceDiscovery] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1132530670\EE\AOLHostManager.exe O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe" O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKLM\..\RunServices: [AOL TopSpeedMonitor] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE" O4 - HKCU\..\Run: [Washer] C:\Program Files\Washer\washer.exe /0 O4 - Startup: Norton Program Scheduler.lnk = C:\Program Files\Norton AntiVirus\NSCHED32.EXE O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll O12 - Plugin for .mpeg: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .wmv: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll O12 - Plugin for .asx: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.net On Thursday, November 24, 2005 at 10:03 am, MrCharlie wrote: > >What does this mean: > >"it is still showing aboutblank on my internet properties home page" > >There is an aboutblank setting for IE. >Open up IE Tools > Internet Options > Home Page >You mean you can't change that? >Please post a fresh HJT log as I asked. >MrC > [Reply or follow-up to this message] re: aboutblank Thursday, November 24, 2005 at 10:58 am Posted by MrCharlie (4141 messages posted) Are you still being hijacked to "AboutBlank"? You logs show this as your start page: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft InternetExplorer provided by America Online O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com The rest of the log looks OK. PS: This is what I'm think you may have although the only evidence of it was the 016 that I had you delete using HJT. O16 - DPF: {11111111-1111-1111-1111-111111113458} - file://C:\WINDOWS\Tempor~1\Content.IE5\JWLSE3M8\explorer9[1].cab Take a look through the whole post: http://www.annoyances.org/exec/forum/win98/1115995435 Please let me know, MrC [Reply or follow-up to this message] re: aboutblank Friday, November 25, 2005 at 2:42 am Posted by Ed (659 messages posted) If you have used Spyware Blaster, it includes a security option that locks your Internet Explorer home page to "about:blank", in order to *prevent* spyware from hijacking that setting. It is possible to use that program to re-enable the home page setting. http://www.javacoolsoftware.com/spywareblaster.html Ed On Monday, November 21, 2005 at 5:57 pm, Dennis wrote: >i have run all the spyware removers, but still have the aboutblank hijacker. please >help [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows 98 Discussion Forum