1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Internet Explorer resets to "about:blank"

Discussion in 'Earlier Versions of Windows' started by lmyers, Apr 15, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. lmyers

    lmyers Thread Starter

    Joined:
    Dec 27, 2000
    Messages:
    64
    My homepage resets to "about:blank" everytime I reboot. Here is my Hijack This log. Any help on what if anything to delete would be appreciated. Also I have run ad-aware, spy-bot and cwshredder with no success.

    Thanks for any help.

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATI2PLXX.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\ATI2CWXX.EXE
    C:\WINDOWS\SYSTEM\PRPCUI.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
    C:\PROGRAM FILES\PHOENIX TECHNOLOGIES\BAYSWAP\BAYSWAP.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.msn.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [ATIPOLAB] ati2plxx.exe
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [Ati2cwxx] Ati2cwxx.exe
    O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [BaySwap] C:\Program Files\Phoenix Technologies\BaySwap\BaySwap.exe
    O4 - HKLM\..\Run: [BaySwap2] C:\Program Files\Phoenix Technologies\BaySwap\TbUpdate.exe
    O4 - HKLM\..\Run: [RegShave] C:\Progra~1\REGSHAVE\REGSHAVE.EXE /autorun
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - Startup: Free WebSite Tools.lnk = C:\Program Files\CoffeeCup Software\CoffeeCup Free Zip Wizard\ThirtyDayTimer.exe
    O9 - Extra button: Real.com (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Messenger (HKLM)
    O16 - DPF: Dialpad Java Applet - http://www.dialpad.com/applet/src/vscp.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37900.5410069444
    O16 - DPF: {544EB377-350A-4295-9BEB-EAB8392E09C6} (MSN Money Charting) - http://fdl.msn.com/public/investor/v13/invinstl.exe
    O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
     
    lmyers, Apr 15, 2004
    #1
  3. KMW

    KMW

    Joined:
    Apr 1, 2004
    Messages:
    877
    This is just how the home page is set on your computer I think. Nothing to do with any virus or trojan. Just a simple setting, You can use what ever page you want as your home page. About blank is the page I always use as I don't like looking at ads I'm never going to use anyway. The msm.com home page for instance.

    Click the help button of IE tollbar and you should find this listed

    To change your home page

    Your home page is the page that appears every time you open Internet Explorer. Choose a page that you want to view frequently, or one that you can customize to get quick access to all the information you want, such as the msn.com home page.

    Go to the page you want to appear when you start Internet Explorer.
    On the Tools menu, click Internet Options.
    Click the General tab.
    Under Home page, click Use Current.
     
    KMW, Apr 15, 2004
    #2
  4. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    114,451
    Are you sure CWShredder didn't take care of the About:blank problem because I don't see it in the log (I might be missing something though). This is a CWS hijack.

    Please repost your entire log because you cut off the top portion which gives valuable information about your OS.

    Cookie
     
    Cookiegal, Apr 15, 2004
    #3
  5. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    80,119
    First Name:
    Frank
    Cookiegal:

    You took the words right out of my mouth. I was wondering which operating system(95, 98, ME) is being used and if the HijackThis program is up-to-date(1.97.7).

    Imyers:

    Do you have an antivirus program installed? I don't see one in your running processes.

    What do you mean you ran Spybot, Ad-aware, and CWShredder with no success? No spyware, browser hijackers, etc. was detected and removed?
     
    flavallee, Apr 15, 2004
    #4
  6. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    114,451
    You know what they say Flavallee "Great minds think alike" (LOL)

    Cookie :D
     
    Cookiegal, Apr 15, 2004
    #5
  7. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    80,119
    First Name:
    Frank
    I don't know about having a "great mind". :D :D :D
     
    flavallee, Apr 15, 2004
    #6
  8. KMW

    KMW

    Joined:
    Apr 1, 2004
    Messages:
    877
    whoops, got it wrong did I. gulp
     
    KMW, Apr 16, 2004
    #7
  9. lmyers

    lmyers Thread Starter

    Joined:
    Dec 27, 2000
    Messages:
    64
    Since I had no success using several anti-spy programs I installed an anti-virus program and immediately found and removed two trojans. Problem was immediately solved. I did not use anti-virus before since this is just my traveling laptop and I seldom use it to connect to the internet with it. I mainly prepare reports and get e-mail with it.

    It is a Compaq 1700 with P3 processor, Windows 98SE. Thanks to those who offered assistance.

    Larry
     
    lmyers, Apr 16, 2004
    #8
  10. flavallee

    flavallee Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    80,119
    First Name:
    Frank
    I'm glad to hear you got the problem solved. :D

    If you're going to connect to the internet at all, play it safe and use an antivirus program. (y)
     
    flavallee, Apr 16, 2004
    #9
  11. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Do you remember what trojans were found? This same issue is bugging someone with XP in the Security forum and there is nothing in the Scanlog to explain it?
     
    Rollin' Rog, Apr 16, 2004
    #10

  12. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/220584

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice