Internet Browser Hi Jack - About:Blank ! !

Tysonator · 8 Apr 2006 at 15:31

Hi Guys,
Can some one please help !

my MS Internet Explorer has been hi jacked by about:blank and i also have SpyWare Quake installed in the system icon tray.
I have run MS Antispyware, SpyBot & Search & destory,SE ADware, AVG Anti Virus. They have not picked the problem up.
I think the SpyWare Quake is a new Hi jack threat ! :mad:

Plus some sort of MediaGateWay program as well, which i have removed

The side effects of this hijack is pop up messeages from the System icon tray.
Another Symptom
The http://www.bestsecurityguide.com/ home page appears as the Internet Explorer home page, even if the home page is reset or the computer is disconnected from the Internet !
An i can not get to another web site from here, i am always promted to their security page.

I think i need to turn off the SpyWare Quake in msconfig, though i am not sure which programme it is ! ?
the start up programs i have ticked are
Dragdiag
NVMixerTray
AsusProb (ASUS mother baord probe)
PCLECoInst
PSDrvCheck
iTouch (KeyBoard software)
zlclient (Zone alarm )
rundll32
NvCpl
NvMcTray
avgemc (Grisoft AVG Anti Virus)
avgcc (as above)
ctfmon
msmsgs (MS Messenger)
MsnMsger (as above)
BTTray (Belkin Blue Tooth software)

Many thanks

ns400r · 8 Apr 2006 at 16:04

about:blank ? ? ?

That just means that the default home page is a blank page. Perfectly normal as that's what I use.

Unless there is a virus/trojan with the same name.

benjo plz. · 8 Apr 2006 at 16:06

http://www.pchell.com/support/aboutblank.shtml

ns400r · 8 Apr 2006 at 16:07

Perfectly normal.

ns400r · 8 Apr 2006 at 16:08

Mmmmm, best to try and confirm if you actually have the above crap or if it's just that the home page has been set to about:blank.

ns400r · 8 Apr 2006 at 16:11

http://www.bestsecurityguide.com/

Don't use that page. What a totally bogus site it is with untrue and misleading information !

Trigger · 9 Apr 2006 at 08:22

@ ns400r, have you not heard of the

button?

@ OP, I think you need to have a look in your hosts file in connection with all traffic being redirected to that site. The only entry in it should be:

127.0.0.1 localhost

and you can find the file at

C:\WINDOWS\system32\drivers\etc\hosts

Mr Stigy · 9 Apr 2006 at 08:47

Try this

Ive had this before, nasty little thing actually.

-Try Adaware-Away, this removes most of the variants.

-The way i had to remove was through the registry, i changed everything from About:Blank to Google and this worked.

ns400r · 9 Apr 2006 at 15:36

Yes I have heard of the edit button. If posts are edited then they don't show as new posts in the forum and people don't bother checking to see if I have happened to edit a previous post.

Tysonator · 10 Apr 2006 at 13:44

Update

I have got rid of the Security Malware / spyware from some notes on the web.
This little nasty piece of spyware even loaded up in the system tray in safe mode ! ! :confused:

So i have no got rid of that.
As for the home page,
ns 400r
I reply to your question, i do not get a blank home page, i do get a the web address posted http://www.bestsecurityguide.com/
I have my home page set to www.overclockers.co.uk and the IE browser will not go to it at, in fact any web address i type does not work and the home page of http://www.bestsecurityguide.com/ is displayed.
Even if i cut a paste an address in he IE browser.
My Mozilla FireFox in completely un effected, and that is what i am using to naviagate through the web.

Mr.stigg
do you have you manual notes on how to get rid of this little B*****d
Many, many thanks if you still have them

I have run SpyBot, Ad Aware, CWShredder, MS Anti Spyware (this finds nothing !) AVG, Trail version of Spy Sweeper which does fine 8 files, though the trail version is only to scan not remove.
So i might have to purchase it, if you guys think it is any good ! ? : :confused:

Hope you guys can help

Tysonator · 14 Apr 2006 at 21:02

I hope i do not get told off for starting a new post, though this post is the cure to the above.

I have managed to remove the Home Page Hi-jack problem.
Firstly i had to remove the SpyWare Quake programe that had self installed.
I got some instructins from the web which work well. I had to do this in safe mode, and even while in safe mode this soft ware stilled loaded in my system tray !
Any way i deleted the fies and rebooted.
then i updated AVG, AdAware, MS AntiVirus, SpyBot Search & Destory applications.
Then ran them one at a time, the different applications were detecting different files on my PC.
The main one that was causing the home page hi jack was files relating to Zlob trojan.
Namely ;
DCII.Delete
DC8.exe
Dc9.exe
hp8fc4.tmp
zlob.QA
plus there were some files to do with 'Smithfraund-C

Plus i type the files in google which directed to the Symantec web site. Which listed other files relating to this Zlob Trojan and which directories they were in. So some manual deleting was required, though only for a few files.

Now my Home Page is fine a working as normal. I have started to use FireFox as my main browser now. The risk to to high using IE, plus the time i wasted in putting things back to how they were was a lot of hours !
That time should have been spent doing more enjoyable thigs, like quality time with the Wife !

many thanks for you help guys

T :cool: