Spyware, Viruses, & Security forum

General discussion

Removing the About:Blank Virus ?

by Cetin Denislam / June 25, 2004 4:49 AM PDT

I'd like to pass the following Removing the

Discussion is locked
You are posting a reply to: Removing the About:Blank Virus ?
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Removing the About:Blank Virus ?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Thanks Cetin :)
by Marianna Schmudlach / June 25, 2004 5:32 AM PDT

Yep, that one is done that way - BUT - in the meantime there is also a SUPER HIDDEN file and that needs a different approach. I don't know IF it is a good idea everyone would remove "about:blanc" by themself. They have to KNOW what they are doing! I would still suggest the HJT forums of Computer Cops, Wilders, SWI - there are EXPERTS who ONLY do this "stuff" .

Collapse -
BTW - for Win2K PLUS XP there is another way
by Marianna Schmudlach / June 25, 2004 1:41 PM PDT
In reply to: Thanks Cetin :)

but I do NOT think it is for "everyone" to use.

=== Find Hidden dll ===
Download 'Dllfix.exe' from:

=== Part 2 === (removing dll and CWS infection)

=== Remove Hidden dll === (manual entry of dll name)

=== Clean Remaining Infection ===

If you are interested I could send you the instructions Happy

Collapse -
Thanks for the offer Marianna ?
by Cetin Denislam / June 26, 2004 12:24 AM PDT

? however, the procedure provided in the article seems clear and simple for me Wink I did just a cold analysis and will keep a look for that registry key in the future.

In the real world I didn't encounter it [yet], although I cleaned other hijackers on novice PC users.

My post's intention was just to pass something interesting. Sometimes we need a little escape from all sorts of help cries Wink

You're welcome, keep up the good work Happy


Trying to unweave, unwind, unravel
And piece together the past and the future,

T. S. Eliot

Collapse -
Re: BTW - for Win2K PLUS XP there is another way
by wjk1942 / July 10, 2004 4:09 AM PDT

please send fix for about blank...thank you williamk18@excite.com

Collapse -
(NT) (NT) William, Please Read the 1st & 3rd Posts In This Thread
by Grif Thomas Forum moderator / July 10, 2004 3:17 PM PDT
Collapse -
Hi Marianna..One more question
by radean / June 27, 2004 8:09 AM PDT
In reply to: Thanks Cetin :)

I'm running WINXP Home Edition, with a restore disk only, so the Recovery Console may not be an option for me. But I don't have the problem. LOL

My grandson is using a WIN98 machine, and uses AVG, plus SpywareBlaster.Still seems to have an ongoing problem, with Gator, and About:blank. No problem getting rid of Gator, with Spybot, Adaware, and CWShredder, but About:blank still pops up on him. Just went into his registry, and deleted all I could find about this, which was About:blank.ws.

SO, finally a question..
Is there a program, or a website that deals with this? I did read your previous posts, but seemed a bit vague, at least to me.
Sorry if I missed something, but if there is a hard and fast way to get rid of this thing, I would sure appreciate knowing about it.

Haven't bugged you for a while now, so will try to do better....LOL.

Collapse -
Hi Ray - yeah I
by Marianna Schmudlach / June 27, 2004 5:05 PM PDT


yes, you can get rid of it.

You must have missed it Wink

Please go to http://www.computercops.biz/downloads-file-328.html or or
http://www.mjc1.com/mirror/hjt/ or

and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log as a .txt file

Now go to one of the HJT forums:




and copy\paste that log into a new thread.

You could already help the guys\gals at the HJT forums by downloading:

"StartDreck", from here:

Unzip to its own folder and start the program,
Press 'Config'
Press 'Unmark All'
Check the following boxes only:
Registry -> Run Keys
System/drivers> Running processes
Press 'Ok'
Press 'Save' and select the location to save the log file
(default is the same folder as the application)

Post the log in the forum after you have posted your HJT log first.

I do NOT want to make it "complicater" as it is. It won't say much to you I guess, but you can find the hidden dll in there.

They'll tell you what to do.

Have a great day Happy

Collapse -
Re: Removing the About:Blank Virus ?
by Berfert / June 25, 2004 11:35 AM PDT

Cetin it is good to still see you around. You have always given good advice and assistance. To an almost computer illiterate like myself I find this article confusing at times. I think I will let the HJT forum assist me whenever I get the caught by the about blank.

Collapse -
(NT) (NT) Thanks, so use the resources you're comfortable with ?
by Cetin Denislam / June 26, 2004 12:24 AM PDT
Collapse -
Re: Removing the About:Blank Virus …
by Donna Buenaventura / June 25, 2004 1:46 PM PDT
My only obiection is that in Step2 one can boot directly in Recovery Console. In other words, it's not necessary adding the Recovery Console option as dual boot.

Second that Cetin. Users will just make sure that their CD-ROM is set as the primary boot device and run Recovery Console from the operating system CD

Thanks Cetin for the link Happy
Collapse -
About Recovery Console ...
by Cetin Denislam / June 26, 2004 12:24 AM PDT

Well Donna, regarding adding the Recovery Console option on HDD boot, I seem to recall that windows XP SP2 (future windows XP CD kits including SP2) won't allow to do it. I can't find the reference at hands now, but canceling it as option it's not a big deal ;-).

You're welcome, keep up the good work Happy


Trying to unweave, unwind, unravel
And piece together the past and the future,

T. S. Eliot

Collapse -
Re: Removing the About:Blank Virus ?
by C. Taylor / June 26, 2004 2:43 AM PDT

What about Windows ME? I tried entering the value you listed in the address bar of reglite and I didn't get anything that I could double click on (AppInit DLLs). Is there something different for this?

Collapse -
Re: Removing the About:Blank Virus ?
by Marianna Schmudlach / June 26, 2004 2:59 AM PDT


Win 98 and winme do NOT have an AppInit DLL.

There is a different method - better you run HJT and post it either on the HJT forums of Computer Cops or Wilders.


Collapse -
Re: Removing the About:Blank Virus ?
by C. Taylor / June 26, 2004 3:47 AM PDT

Thanks - I didn't know where to list my HJT logs.

Collapse -
You're Welcome
by Marianna Schmudlach / June 26, 2004 4:12 AM PDT

HJT is a powerful tool and we have NO security experts in this forum - this way it is much better to post your HJT log in dedicated HJT forums like in SpywareInfo (SWI), Wilders and Computer Cops.

But be patient as ALL HJT forums are overwhelmed.

Popular Forums
Computer Help 51,912 discussions
Computer Newbies 10,498 discussions
Laptops 20,411 discussions
Security 30,882 discussions
TVs & Home Theaters 21,253 discussions
Windows 10 1,672 discussions
Phones 16,494 discussions
Windows 7 7,855 discussions
Networking & Wireless 15,504 discussions


Meet the drop-resistant Moto Z2 Force

The Moto Z2 Force is really thin, with a fast processor and great battery life. It can survive drops without shattering.