MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular Once you've downloaded HijackThis and Reglite, open Registrar Lite and navigate to the following entry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Look for the Key named AppInit_DLLs, the value in this key is the hidden Obviously, change the hidden.dll to the name of the file that you found when doing the search described above. You'll know that you have About: Blank on your computer because it is a leach on virtual memory. his comment is here
There are several variants of the About:Blank hijacker and all of them are difficult to remove manually. by Cetin Denislam / June 25, 2004 4:49 AM PDT I'd like to pass the following Removing the Discussion is locked Flag Permalink You are posting a reply to: Removing the Once reported, our moderators will be notified and the post will be reviewed. This means that you can secure your system without him trying to attack again. http://www.bleepingcomputer.com/forums/t/24902/aboutblank-hidden-dll/
Flag Permalink This was helpful (0) Collapse - Re: Removing the About:Blank Virus ? when attempting to delete on reboot file is not deleted on reboot! If it's there, remove it. This will cause Windows Find to see if the file does exist, and then if so it will be removed from the list to reduce the number of identified files.
but problem always returns. VBSCRIPTS REMOVAL METHOD A company called Silent Runners has come up with several Visual Basic Scripts used in conjunction with Registar Lite 2.0 to remove the About:Blank version of the CWS Once the programs are installed, open Registrar Lite and move to the following entry: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrent VersionWindows Look for a key named "AppInit_DLLs." The value that is inside this key is About Blank Internet Explorer I did read your previous posts, but seemed a bit vague, at least to me.Sorry if I missed something, but if there is a hard and fast way to get rid
Even if you reset it to something else it will be reset back to about:blank after a while. Currently there are about 5 variants of the About:Blank homepage hijacker and Adware Away handles all these variants. Thanks - I didn't know where to list my HJT logs. http://www.pchell.com/support/aboutblank.shtml Eliot Flag Permalink This was helpful (0) Collapse - Re: BTW - for Win2K PLUS XP there is another way by wjk1942 / July 10, 2004 4:09 AM PDT In reply
Back to top #3 Patrick Patrick Member Full Member 6 posts Posted 30 November 2004 - 06:17 PM Thanks for your help Daemon, HJT log below.Logfile of HijackThis v1.97.7Scan saved at Blank Space Chords There's a link to donate at the top of the page - thanks for your support Back to top #10 Patrick Patrick Member Full Member 6 posts Posted 06 December 2004 by Cetin Denislam / June 26, 2004 12:24 AM PDT In reply to: Re: Removing the About:Blank Virus ? Open reglite and paste this value in the address bar: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion\Windows\\AppInit_DLLs Then double click: AppInit_DLLs You should be able to see a file with this address: C:\Windows\System32\"Hidden".dll For example
The hidden file is the problem. Define your site main menu About Blank About: Blank is a program that hijacks your computer through the form of adware. Remove About Blank This is the the bad .dll in your system (it could have any name - mine was sqlgfi.dll) You can't delete this file by normal means: If you search for it, About Blank Page You have always given good advice and assistance.
Please, be patient, these people are volunteers. this content Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? The posting of advertisements, profanity, or personal attacks is prohibited. This hijacker is also referred to as the HomeOldSP hijacker because of the changes to the registry that can be seen using HijackThis such as R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank Blank Space Mp3
No problem getting rid of Gator, with Spybot, Adaware, and CWShredder, but About:blank still pops up on him. CNET Reviews Best Products Appliances Audio Cameras Cars Networking Desktops Drones Headphones Laptops Phones Printers Software Smart Home Tablets TVs Virtual Reality Wearable Tech Web Hosting Forums News Apple Computers Deals Since the file name is different for each computer, we'll assume the file name is hidden.dll. http://bgmediaworld.com/about-blank/about-blank-and-the-like.php Started by Ronl , Jul 16 2005 07:34 AM Please log in to reply 1 reply to this topic #1 Ronl Ronl Members 2 posts OFFLINE Local time:03:27 PM Posted
Search for it and delete it, then repeat this step for the dll filename you found using Hijackthis. Http://www.google.com/search?hl=en Http://www.google.com/search?hl=en About:blank Type Exit and then press Enter. How do I Remove the About:Blank homepage hijacker?
Click here to Register a free account now! Spyware, Viruses, & Security forum About This ForumCNET's spyware, viruses, & security forum is the best source for finding the latest news, help, and troubleshooting advice from a community of experts. To rid your self of the hidden .dll, which is the core of the problem, do the following. Make Google My Homepage After rebooting your PC, delete this renamed file.
I can't find the reference at hands now, but canceling it as option it's not a big deal ;-). Taylor / June 26, 2004 2:43 AM PDT In reply to: Removing the About:Blank Virus ? Next type c:\Win98fix\xfind.com "ZZZZZZZ" This will search for files with the ZZZZZZZ string. http://bgmediaworld.com/about-blank/about-blank.php We tend to see the new infections first here - files and data we collect feeds back into the anti-malware companies and is incorpoated into their updates - there is usually
But, it could be anything that the hijacker wanted to name the file. Flag Permalink This was helpful (0) Collapse - (NT) (NT) Thanks, so use the resources you're comfortable with ? Reboot your computer with ctrl-alt-del and go to your c:\windows\system folder and delete deletethis.dll. however, the procedure provided in the article seems clear and simple for me I did just a cold analysis and will keep a look for that registry key in the future.In
Now you can reset your Home Page Setting for Internet Expolrerer to your desired Page - why not Akadia ? by C. Then in to the Windows Recovery Console go to C:\Windows\System32, there modify the file by using the Attrib command, otherwise you won't be able to erase it, another way you could, Please try the request again.
Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 tg1911 tg1911 Lord Spam Magnet Members 19,274 posts OFFLINE Gender:Male Location:SW Louisiana Local time:02:27 PM I don't know IF it is a good idea everyone would remove "about:blanc" by themself. Generated Mon, 23 Jan 2017 20:26:59 GMT by s_hp107 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.5/ Connection Please try the request again.
The hidden .dll regenerates the viewable .dll if it is deleted or changed.