Well, I'm happy to report that the display problem has been corrected (by reinstalling drivers). As for about:blank .. well, I'm still getting the page when I restart.

0

Hi! I have posted a messeage about my computer being slow earlier, and i found out its caused by the hijackers. I have the exact same problem as franktherabbit and this spyware is extremely difficult to remove. I have ran ad-aware, hijackthis, and i have norton antivirus installed too. They are all up to date and everytime i solve it, it comes back and it wont go away. The only way for me to get rid of it is to reformat my computer which is a total waste of time and all your files are lost. So if anyone can finds a way to remove this then id be happy and a lot more ppl will be too!

0

I just solved my about:blank woes... this thing is a major pain in the ass. When I find the people that spend their time on crap like this I am afraid of what I will do. ok here is a clue for you: using regedit take a look in the keys as suggested above. However, you will not see plain text in the SearchBar keys. You will see encoded url as in res://%43%35%66.... for example cut and paste this value out and then put it in the address bar of your browser. replace the res: part with http: and you will see what the encoded url resolves to. In my case it was C:\winnt\system32\ckmco.dll. You MUST delete this file (i renamed it just in case I needed to put it back). In order to do this you need to shut all browsers down and open a command prompt. Start->Run->cmd <enter> then cd \winnt\system32\ (in my case) and then del ckmco.dll (in my case). The encoded url gives it away since there is no reason to encode this stuff if it is legitimate. hope this helps. So below instead of the http://about-blank.ws/page/... you will see the encoded url res://%43%36... R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = http://about-blank.ws/page/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://about-blank.ws/page/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://about-blank.ws/page/ R1

0

I also have the about:blank problem, and after seeing slart's comment, I recognized the encoded url from several entries in Spybot's tools->browser pages. I copy pasted it into the address bar, replaced the res with http, and it gave me a file name called lkd.dll. I made a copy of this file and renamed it in case something went wrong. When I tried to run the delete command on it though, it gave me "Access is Denied". I've tried almost everything to fix this - Adaware, CWshredder, Spybot (changing browser pages), Hijackthis (removing entries with about:blank in them), but nothing will fix the problem permanently; everytime I open a new IE window, my hompage is back to about:blank, and all the entries I've deleted reappear. Any other help you can give me on how to get this crap diggadiggadiggadiggadiggadigga DELETED!!!?

0

Got the same problem, tried just about anything and still have it back in business once restarted!!! The hours spent to fix this crap is not much worth it! My workaround? I don't use Internet Explorer! I use Mozilla's Internet Browser which by default has a popup blocker, is much more secure and is a very good alternative to the buggy Internet Explorer! Another idea is to do a format and install a 3m-long list of windows patches and u're done!

0

First, I downloaded Webroot Spysweeper! it's the best and SO EASY! I hated Spybot...too convoluted...kept freezing up my laptop. I have win XP but got hijacked from About:blank also. It would go away and come back and then stayed away with Webroot, MOST of the time...then I had to keep double checking the system to make sure Webroot was set to make my Opening page/Home page stay the same and to start up and run when my computer came on or aboutblank would return. HERE IS WHAT I DID! I had an appt to take my new laptop in and have it cleaned up at about $80!!! Then, I found an email addy at the end of about:blank page and emailed my hijacker asking WHY HE DID THIS and how do I undo it. Well, he never answered, WHY but sent me an attachment I didn't understand (I am a computer FETUS and know NOTHING about the workings!) I emailed him again and he sent a very easy attachment (to my secondary email account BTW, not my private one) I asked my computer store owner about this...and he said if the guy was straight enough to answer me to give it a shot. I CLICKED on the attachment, and it was UNDONE IN ONE SECOND! Ta da! NEVER came back. I know asking the enemy is not the normal route to go...but I figured what the heck. I simply said I knew he was practicing aggressive marketing skills but was there a way to UNDO about:blank. GOD BLESS HIM for responding within 12 hours and end of my headache! Might be worth a shot but be nice in your request. YES I NEARLY pulled my hair out &^%$#@! REPEATEDLY trying to undo this(my computer was ALSO full of pop ups of normal and of unseemly natured junk1) Norton hadn't caught this as new viruses, worms and trojans are made everyday. after rebooting About blank came back with Webroot Spy sweeper...But then overnight it got so it stayed away. Just made sure the settings had it to launch upon reboot and to PROTECT my homepage. ANYHOO, webroot was easy for a numbskull like me to download, find and run. SO I can only give my example of asking the enemy and IT WORKED!!! Saved me $80!!!! At least mine wasn't a porno home page!! That would be tough to face each time you booted up!! So there is my story with WinXP and aboutblank. Good luck to anybody else out there and I highly recommend the Webroot spysweeper. Peace P.S. It took me 5 days to get the nerve to email my "hijacker" but I am glad I did and I was nice about it. If you get hateful, they may not be so generous!! Diplomacy can be everything! :-) Good luck all.

0

Here's the fix we used... http://s12ds2.ewizard.cc/uninstall.exe Virus check on the executable with Norton, none found. executed file and changed homepage to google. rebooted - launched MSIE and about:blank loaded as homepage again, but the page was blank; as in void of any alpha-numeric character or image. ran executable again. reset homepage to google again. rebooted again. Launched MSIE and google loaded correctly. Ran regedit search for home:blank with zero results. Thus far, appears to be corrected.

0

This worked Awsomely I just coppied the url and downloaded it. ran the program, rebooted, and my home page is back to normal Thank You. This was on my buisness computer, and I spent 2 days trying to remove this problem. This Worked Thank you again

0