MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: about:blank horrible:malware kill:monster
May 29, 2020, 03:42:37 AM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 29, 2020, 03:42:37 AM

Login with username, password and session length
 Featured Sites:
News
New  We now offer MyTechSupport.ca Merchandise! Every purchase goes towards maintaining our site.
Thank you for supporting MyTechSupport.ca!
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: about:blank horrible:malware kill:monster  (Read 909 times)
indycine
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 1


Bookmark and Share

View Profile
« on: August 09, 2005, 08:13:59 PM »

PLEASE SUPPLY RELEVANT INFORMATION:
Operating System Version: Windows XP Home v5.1(Build 2600.xpsp_sp2_gdr.050301-1519:Service Pack 2)
Problem Application Name & Version: about:blank, delivered through SCAgent Trojan (according to AdwareAway program)
Problem Hardware Make & Model: Dell Dimension 2400
Error Messages: keeps looking for a run.dll file, error messages, SpyBot's popups notify me when it changes my homepage.



Can you help me please?

I have a Dell Dimension 2400 computer, running Windows XP Home,
and this horrid about:blank keeps coming back.  It
Logged

 
sUBs
Global Moderator
Hero Member
*****

Karma: +0/-0
Offline Offline

Posts: 278


Bookmark and Share

View Profile
« Reply #1 on: August 10, 2005, 05:42:41 AM »

Hello and Welcome

Did you try using fixes we prescribed for other logs? That's not advisable. You may have caused irrecoverable damage to your system. Cry
Please tell me which tool/fix you have done. Let's see if we can salvage the situation

For the moment, here's what I want you to do..

Please disable TeaTimer for now until you are clean. While TeaTimer is an excellent tool for the prevention of spyware, it can sometimes prevent HijackThis from fixing certain things. TeaTimer can be re-activated once your HijackThis log is clean.
  • Open Spybot Search & Destroy.
  • In the Mode menu click "Advanced mode" if not already selected.
  • Choose [Yes] at the Warning prompt.
  • Expand the [Tools] menu.
  • Click [Resident].
  • Uncheck the Resident "TeaTimer" (Protection of overall system settings) active. box.
  • In the File menu click [Exit] to exit Spybot Search & Destroy.  

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

CLOSE ALL OTHER PROGRAMS & ALL OPEN WINDOWS

Run a scan with HiJackThis & select/tick the following & click "Fix checked" :

O2 - BHO: (no name) - {C1D803A4-1B8F-47E4-BBB4-5F434BB17245} - C:\WINDOWS\System32\pmkl.dll
O2 - BHO: (no name) - {D44BCA08-434D-4A40-A429-EE7133BCBDB4} - (no file)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {0F9B4CA4-A30F-480A-841D-69B45C50A8F8} - http://secure2.comned.com/signuptemplates/AktiveSekurity.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/securelogin-devel.cab
O18 - Filter: text/html - {75017432-078C-4AC3-8106-4A719C61E3CD} - C:\WINDOWS\System32\pmkl.dll
O18 - Filter: text/plain - {75017432-078C-4AC3-8106-4A719C61E3CD} - C:\WINDOWS\System32\pmkl.dll          



= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

Start HiJackThis & go to  Config>Misc.Tools> Delete a file on reboot...
In the popup box that appears, type in   C:\WINDOWS\System32\pmkl.dll
Click the Open button.
Click YES when prompted to restart your computer.

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

Perform an online scan with Internet Explorer with  Panda ActiveScan - (requires Internet Explorer)
Click on the Scan your PC button & a 'pop up' window shall appear. * ensure that your pop up blocker doesn't block it
 Click On 'Scan Now'
 Enter your e-mail address & click 'Scan Now' ...begins downloading Panda's ActiveX controls.- 8MB
 Begin the scan by selecting My Computer
* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
 If it finds any malware, it will offer you a report. Click on see report
 Then click Save report
 Post the contents of the report in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan


= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

In your next post, please include fresh logs from:
    HiJackThis
    Online scan

Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now
Logged

 
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page October 04, 2016, 10:03:25 PM