about:blank home page issue

Discussion in 'adware, spyware & hijack cleaning' started by Neptune, Jul 18, 2004.

Thread Status:
Not open for further replies.
  1. Neptune

    Neptune Registered Member

    Joined:
    Jul 18, 2004
    Posts:
    2
    hello.

    i use an application call cwshredder to scan for the trojan inside the registry. below is the log:


    CWShredder v1.59.1 scan only report
    Please understand that a CWShredder 'Scan only' report
    might not be sufficient to troubleshoot an infected system.
    You can use HijackThis for that:
    http://www.merijn.org/files/hijackthis.zip
    http://www.spywareinfoforum.com/~merijn/files/hijackthis.zip

    Windows ME (4.90.3000 )
    Windows dir: C:\WINDOWS
    Windows system dir: C:\WINDOWS\SYSTEM
    AppData folder: C:\WINDOWS\Application Data
    Username: JULIAN

    Infected Registry value:
    HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Infected Registry value:
    HKCU\Software\Microsoft\Internet Explorer\Main,Search Page
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Infected Registry value:
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Infected Registry value:
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Infected Registry value:
    HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Infected Registry value:
    HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant,http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
    Infected data: file://C:\WINDOWS\TEMP\sp.html
    Hosts file not present
    Found Win.ini file: C:\WINDOWS\win.ini (7461 bytes, A)
    Found line in Win.ini: load=
    Found line in Win.ini: run=
    Found System.ini file: C:\WINDOWS\system.ini (2186 bytes, A)
    Found line in System.ini: shell=Explorer.exe

    - END OF REPORT -


    at first, i found out there is a thread which has the same problem as my PC. pls advise and let me know if my case is same as the one in another thread.
    TY. :)
     
  2. Neptune

    Neptune Registered Member

    Joined:
    Jul 18, 2004
    Posts:
    2
    oh yeah, i miss out 1 thing. Everytime when i open the window explorer, besides the url goes "about:blank", there is another popup window saying that my pc has been infected with parasites known as spyware or says that spyware has been planted into my pc.

    TY. :)
     
Thread Status:
Not open for further replies.