i did not use condom, now have about blank

have about blank

yup, i have the about blank crap on my computer and have read and read but just dont have the brain pan to understand this (ya big dummy)...

i have dl'ed hjt ,cwsshred,dll fix, and spybots&d, i am completely lost and retarded. if someone has the patience to help please chime in.

i have the about blank homepage i cannot change and also the popup page that comes with it
i used spybot s&d1.3



Logfile of HijackThis v1.97.7
Scan saved at 7:41:13 PM, on 5/22/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\me\Desktop\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ne2.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ne2.attbb.net

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {A7E3D665-C039-41E5-9E31-99FFBE47359D} - C:\WINDOWS\System32\nobp.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: Data LifeGuard LifeLine Lite installer.lnk = C:\Documents and Settings\me\Local Settings\Temp\ins1.tmp\dlgli.exe
O4 - Global Startup: CorelCENTRAL 10.lnk = ?
O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/mickey/us/win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37618.5721875
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab




also here is a log of dllfix log but i dunno if it will help


05/22/2004 06:06 PM 57,344 winid.dll
05/22/2004 06:05 PM 31,232 nobp.dll
03/29/2004 09:25 PM 550,400 rtcdll.dll
03/29/2004 09:25 PM 136,704 schannel.dll
03/29/2004 09:25 PM 969,216 msgina.dll
03/29/2004 09:25 PM 51,712 msasn1.dll
03/29/2004 09:25 PM 454,656 ipnathlp.dll
03/29/2004 09:25 PM 36,864 mf3216.dll
03/29/2004 09:25 PM 593,408 h323msp.dll
03/29/2004 09:25 PM 48,640 browser.dll
03/29/2004 09:25 PM 241,664 gdi32.dll
03/29/2004 09:25 PM 301,568 netapi32.dll
03/29/2004 05:25 PM 648,192 lsasrv.dll
03/16/2004 02:44 PM 30,749 vbajet32.dll
03/16/2004 02:44 PM 1,507,356 msjet40.dll
03/16/2004 10:44 AM 380,957 expsrv.dll
03/05/2004 10:05 PM 97,280 txflog.dll
03/05/2004 10:05 PM 214,528 rpcss.dll
03/05/2004 10:05 PM 442,880 rpcrt4.dll
03/05/2004 10:05 PM 1,105,408 ole32.dll
03/05/2004 10:05 PM 64,512 mtxclu.dll
03/05/2004 10:05 PM 82,432 mtxoci.dll
03/05/2004 10:05 PM 977,920 msdtctm.dll
03/05/2004 10:05 PM 150,528 msdtcuiu.dll
03/05/2004 10:05 PM 365,568 msdtcprx.dll
03/05/2004 10:05 PM 499,200 comuid.dll
03/05/2004 10:05 PM 226,816 es.dll
03/05/2004 10:05 PM 1,177,088 comsvcs.dll
03/05/2004 10:05 PM 64,512 colbact.dll
03/05/2004 10:04 PM 110,080 clbcatex.dll
03/05/2004 10:04 PM 596,480 catsrvut.dll
03/05/2004 10:04 PM 225,280 catsrv.dll
03/05/2004 06:05 PM 499,712 clbcatq.dll
03/03/2004 01:53 PM 595,968 INETCOMM.DLL
03/01/2004 02:55 PM 348,189 msxbde40.dll
03/01/2004 02:55 PM 831,519 mswdat10.dll
03/01/2004 02:55 PM 614,431 mswstr10.dll
03/01/2004 02:55 PM 258,077 mstext40.dll
03/01/2004 02:55 PM 552,989 msrepl40.dll
03/01/2004 02:55 PM 315,423 msrd3x40.dll
03/01/2004 02:55 PM 421,919 msrd2x40.dll
03/01/2004 02:55 PM 348,189 mspbde40.dll
03/01/2004 02:55 PM 213,023 msltus40.dll
03/01/2004 02:55 PM 241,693 msjtes40.dll
03/01/2004 02:55 PM 151,583 msjint40.dll
03/01/2004 02:55 PM 53,279 msjter40.dll
03/01/2004 02:55 PM 319,517 msexcl40.dll
03/01/2004 02:55 PM 512,029 msexch40.dll
03/01/2004 02:52 PM 358,976 msjetoledb40.dll
02/25/2004 01:08 PM 680,960 DivX.dll
02/09/2004 09:10 PM 200,984 wuaueng.dll
02/09/2004 09:09 PM 183,064 iuengine.dll
02/09/2004 09:08 PM 115,480 iuctl.dll
01/16/2004 03:29 AM 1,024,512 BROWSEUI.DLL
01/08/2004 02:23 PM 585,216 WININET.DLL
01/08/2004 02:23 PM 1,337,344 SHDOCVW.DLL
01/08/2004 02:21 PM 2,764,288 MSHTML.DLL

 

Hi gary42095,

The easiest way to solve this is to update Windows and IE and then scan your computer with AdAware.

If that does not work remove this file: C:\WINDOWS\System32\winid.dll either from bootdisks or from the Recovery Console.
Then again use AdAware as described here: https://www.wilderssecurity.com/showthread.php?t=15913

Regards,

Pieter