about:blank going on 2 weeks, still can't get rid of it.

[rogerlarry]

I've got the about:blank thing going. I've had it before and I was able to fix it, but this time its much harder. I've been going through all the steps before posting this message. Right now, I'm doing all the coolwebsearch removal procedures, which is what I think I have. Doing all these presteps before posting takes a quite a bit of time, not that I'm complaining, I'm just hoping that all these programs and instructions are still necessary. Thanks in advance...

By the way, I'm trying to avoid having to buy a subscription for anti-malware programs (remove about buster blank buddy, spybot, etc...). Not sure but I don't want them to profit from my pain....

 

[howard_hopkinso]

Hello and welcome to Techspot.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programme in your control panel and uninstall anything to do with(if there).

WinAntiVirus Pro 2006

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ALCMTR.EXE
ntddetect.exe
5325140f.exe
WinAV.exe
fat.exe

Close task manager.

Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [ntddetect] C:\WINDOWS\System32\ntddetect.exe

O4 - HKLM\..\Run: [5325140f.exe] C:\WINDOWS\system32\5325140f.exe

O4 - HKLM\..\Run: [WinAntiVirusPro2006] "C:\Program Files\WinAntiVirus Pro 2006\WinAV.exe" /min

O4 - HKLM\..\RunServices: [ntddetect] C:\WINDOWS\System32\ntddetect.exe

O4 - HKLM\..\RunOnce: [fat.exe] C:\Program Files\WinAntiVirus Pro 2006\fat.exe

O4 - HKCU\..\Run: [ntddetect] C:\WINDOWS\System32\ntddetect.exe

O4 - HKCU\..\Run: [5325140f.exe] C:\Documents and Settings\Ed\Local Settings\Application Data\5325140f.exe

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\Documents and Settings\Ed\Local Settings\Application Data\5325140f.exe

C:\WINDOWS\system32\5325140f.exe

C:\Program Files\WinAntiVirus Pro 2006

C:\WINDOWS\System32\ntddetect.exe

ALCMTR.EXE Search your system for this file and delete all instances of it.

Reboot into normal mode and turn system restore back on.

Post a fresh HJT log.


Regards Howard :wave: :wave:

 

[hynesy]

I have said this several times, bitdefender is the one stop virus scanner, i had the exact same problem, only bitdefender found it and completely removed it with out any messy safe mode starts or system restore diables

 

[howard_hopkinso]

Bitdefender is undoubtedly a very good antivirus product, as are many others.

However, it still has it`s limitations as does any other antivirus programme. No single programme ever can ever hope to clean every type of infection. Add to that the fact that new infections are being found everyday and it`s no wonder there will never be a single do it all programme.

There are plenty of infections that require specialist tools in order to get rid of them. Look2me/Vundo/SmitFraud etc etc.

HJT is one of the most useful tools for indicating the presence of nasties on a system. In a lot of cases, it is the only way to pinpoint an infection.

Booting into safe mode and disabling system restore is sometimes the only way to make sure an infection can be killed.

In fact, system restore while very useful in some respects, is a paradise for nasty infections, as no antivirus programme can kill anything in a restore point. When system restore is turned off this deletes all the restore points and anything nasty that`s in them.

However, I am willing to concede HJT is not perfect, but it has deffinitely helped thousands and more likely hundreds of thousands of people to clean their systems.

I spend a hell of a lot of time here, helping members to get rid of some damn infection or other. In fact I have seen plenty of members who have Bitdefender/Symantec/Norton/Kaspersky/Avg/Avast installed, succumb to infections that their antivirus programme hasn`t recognised.

I would absolutely love it if there was one programme out there that would deal with everything. It`d certainly make my life easier lol.

If you look at this post in detail, you will see that rogerlarry`s problems are nearly all caused by trojans, and a bogus antivirus programme, that actually drops trojans and worms on to his system. I don`t believe Bitdefender or any other antivirus programme would clean these out. Especially since the Winantivirus programme has been deliberatly installed, all beit without realising it`s bogus.

The fact that you don`t get viruses etc is probably due to you having sensible surfing habits and less to do with your antivirus programme. I`ve not had a virus on my system for years, because like you I`m careful about where I surf and what I click on. If only everyone was like us, it`d be great. Unfortunately, the average computer user knows very little about security and net safety.

Regards Howard

 

[rogerlarry]

Now I can't access secure websites?

Howard,

Thanks for the instructions. I would have replied sooner, but after doing all the steps. I lost the ability to access secure websites, which meant that I couldn't access my e-mail to get the password to logon to this website etc....

Before going any further with the about:blank problem, I need some help getting access to secure websites. I must have deleted something or one of anti-virus software programs changed one of my internet settings or something.

By the way, I have very good surfing habits.

This all started in one of two ways.....

1) Recently, I had to disable adaware so that I could see a pop-up and then I forgot to turn adaware back on and then I got another pop-up that looked like adaware telling me I needed to install something.
2) My Crive ran out of space and I could figure out what was doing it and I downloaded all these "pc performance" things, which didn't do any good. I ended-up finding that my Windows Media Center recorded way too many shows. Like a twilight zone marathon session over the 4th of July weekend.

I'm having to access this site at work. I didn't have time this morning but tomorrow I'll bring in an updated HJT log from home...because I can't access secure websites at home anymore....

Things I've done to try and get secure websites fixed.
1 Tools>Internet Options>Advanced and checked SSLs and TLSs and allowed third-party extensions.
2. Adjusted secure settings and put hotmail as a "trusted site"
3. Downloaded the new IE7 beta (hoping this might solve all my troubles but it didn't work and I had to uninstall, I also tried Firefox and that didn't work either.




Thanks again.....

 

[howard_hopkinso]

Sorry to hear you`re having major problems.

Once I have your fresh HJT log, I will see what I can do to help you.

Regards Howard

 

[rogerlarry]

About:Blank is disabled but lost ability to https

Howard,

I got mixed results. Last night I got home and again tried to repair whatever happened to the computers ability to access https sites. Unfortunately, I wasn't able to restore it. I ran all the regsvr XXX.dll instructions and reset all the internet options on IE6 back to default. Still didn't work...

On the bright side, I was able to change my homepage, so I think we got the about:blank thing beat???

I've attached a new HJT log.

Do you have any suggestions on how I can fix the https issue? Unfortunately, one of the instructions required that I shut-off Windows System Restore. I turned it back on yesterday.

I've heard that I might want to uninstall Norton/Symatec. I tried to uninstall in safe mode and regular mode with no luck. There is a program "Rnav2003.exe " that can be used when add/remove programs doesn't work. I'm kinda hesitant to remove anything else from the system as I fear losing more functions.

Thanks again....

 

[howard_hopkinso]

First, your HJT log is clean.

Download the free AVG antivirus programme and the free Zonealarm firewall from HERE and HERE.

Do not install them until you have got rid of Symantec/Norton.

Go HERE and follow the instructions for removing Symantec/Norton.

During the removal process disconnect from the net.

Once Symantec/Norton is completely uninstalled, reboot your system.

Install Zonealarm, followed by AVG and reboot your system. Reconnect to the net and run the AVG updates.

Let us know how your system is running.

Regards Howard

 

[Computer noob]

Should most poeple who have Norton delete it and download those 2 things, or just him?

 

[howard_hopkinso]

Should most poeple who have Norton delete it and download those 2 things, or just him?

In my opinion everyone should get rid of Symantec/Norton crapware.

It`s a huge resource hog and I don`t think it a very good antivirus programme either.

The same goes for McAfee as well.

The free AVG seems to be the antivirus programme of choice around here. I have used it for a long time and have never had any problems.

The Zonealarm firewall programme is very good, but some members will disagree with that. Again, I have used it for a long time with no problems.

As an alternative, the free Kerio firewall is also very good.

Regards Howard

 

[rogerlarry]

Windows System Recovery

Howard,

I couldn't spend another night fiddlling with the PC so I did a Windows Systems Recovery. I'm sure I lost somethings but I got peace of mind. Thanks for all the help.....I hear that doing a system recovery is a good thing to do every once in a while....cheers.

 

[howard_hopkinso]

I`m glad your problem is solved.

Thanks for taking the time to let us know.

Regards Howard