>>>>>>>Original Message Name: Dan (by tartandjm) Date: July 22, 2004 at 14:30:48 Pacific Subject: backdoor.trojan logoh.dll? Help? "Running XP, it started with the about:blank hijack. ... it morphed into this backdoor.trojan virus problem ... .no matter how many times I run HijackThis, spybotS&D, adaware, TrojanRemover or Norton Antivirus 9, it keeps coming back on reboot<<<<<<< Hi ! Please can someone help???? Jan 2006 and I have very same problem I have read in the archives first occuring in 2004. IExplore opens itself repeatedly (alt-tab-del reveals up to 15 copies at any time). Homepage resets to about:blank and resets to a proxy setting. I DO NOT SEEM TO BE BLE TO RID MY LAPTOP OF THIS TROJAN. IT HIDES AND REPLICATES ON REBOOT. ANY HELP WOULD BE APPRECIATED! This is what I have done so far: Very first response was to go to symantic website. Followed their suggestions to no avail. Over past 14hours have done all the following: 1. Downloaded latest Norton (it found backdoor trojan but cannot delete it) 2. Run highjackthis (deleted HK that were obviously bad) 3. Downloaded MicrosoftAntiSpyware (fixed identified probs but culprit about:blank returns on reboot) 4. Run laptop in safe mode -remebering to disable system restore -(Norton doesn't find anything..actually NONE of the AV prgs find anything) 5. Went in thru Run:Regedit and manually deleted reg keys (but they return on reboot) 6. (Norton plays games now - won't always start - still doesn't find ANY PROBs) so used add/remove programs to delete the corrupted Norton. Reinstalled Norton (Norton doesn't find any trace) 7. Ran SpyBot (found and fixed some hotkey problems - but about:blank returns and resets IExplore to a proxy setting). 8. Searched internet again. Found TrueSword (this was terrific! - found over 30 problems. Fixed them all. trojans/backdoors/spyware/adware/malware BUT... yes, you guessed it, on reboot the about:blank trojan was back) 9. Searched internet on another non-infected machine and found these posts) Tried Aero's suggestion (see below). >>>>Name: Aero (by Aerozx) Date: July 22, 2004 at 16:06:53 Pacific Subject: backdoor.trojan logoh.dll? Help? Reply: Look at this forum and scroll down to post #55: Http://www.computing.net/security/wwwboard/forum/12255.html<<<<< So I followed these instructions. Renamed HKLC/../windows to /windows2, deleted DLL. Looked good!... but Norton sh*t itself on reboot and wouldn't reopen. Lost all the AV icons on my task bar. It's like the trojan is now preventing the AV progs from doing their job. For example, an .xds extension was mysteriously "added" to the norton.exe 10. AS I type, I am back in safe mode. Trying to find way to back up backup my files. Do I need to do a complete system reformat to be rid of this? Happy to post HiJackThis log if anyone interested... Sharon

Try these 2 free on-line scans and follow the instructions on removal. On-line Spyware Scan On-line Ewido Spyware Scan Hopefully my advice will help you...Please post back with your results....thanks

have you tried to startup first in safe mode and then run in the command tool the msconfig? In there selects diagnotic startup and then in the tab services enable again everything related to the AV. Then restart in normal mode and scan complete. Once done, figure out on the net one by one the services that are disabled in msconfig. if they are safe, enable again, else remove. Do not trust one souce on the net, cross check the info.

Sharon, read my response to "About Hijacker" post just above yours. Give a man a fish and you feed him for a day; Teach a man to fish and you feed him for a lifetime; Then industry pollutes the water and kills all the fish.

Ooops, sorry, the correct subject title is: "About:Blank virus" Give a man a fish and you feed him for a day; Teach a man to fish and you feed him for a lifetime; Then industry pollutes the water and kills all the fish.

Thanks for the comments so far, In safe mode run/msconfig "cannot find msconfig" Sharon

try this , click start then click run and then in the box type msconfig then hit the enter button About Blank Removal " It'll Get Ya When You Aint Lookin "