Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How to remove About:Blank & About:NavigationFailure & SE.DLL


  • Please log in to reply
1 reply to this topic

#1 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,618 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:17 AM

Posted 02 November 2004 - 07:05 PM


This self-help guide will allow you to remove the About:Blank Hijacker in Windows 95/98/ME
(Also known as Hidden_DLL, Appinit_DLLs, About:NavigationFailure, \temp\sp.html, se.dll)


The below instructions should no longer be used. Instead use the instructions found in this topic What this program does:
When you open Internet Explorer your browser will be redirected to a page called About:Blank or About:NavigationFailure.
Tools Needed for this fix: Related Tutorials: Symptoms in a HijackThis Log may include, but not necessarily have all of the following:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:NavigationFailure
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\Windows\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O4 - HKLM\..\Run: [sp] rundll32 c:\windows\temp\se.dll,DllInstall

If you have any of the types of symptoms then you most likely have this type of infection and should continue reading.

  1. Please make sure that you can view all hidden files. Instructions on how to do this can be found here: How to see hidden files in Windows
  2. Download StartDreck from the link provided above.

  3. Once it is downloaded, extract the file into c:\startdreck.

  4. Navigate to c:\startdreck and double-click on Startdreck.exe

  5. When the program opens click on the Config button.

  6. Then click on the unmark all button.

  7. Then put checkmarks in the following checkboxes: Under Registry put a checkmark in the Run Keys checkbox. Under System/Drivers put a check in the Running Proccess checkbox.
  8. Press the OK button.

  9. You will now see a lot of text appear on your screen. Scroll through this text until you see the RunServicesOnce section. Under that we are looking for an entry that contains a DLL in the \system directory followed by a ,StreamingDeviceSetup. An example of a entry like that is below:

    »RunServicesOnce
    **t=rundll32 C:\WINDOWS\SYSTEM\MSC.DLL,StreamingDeviceSetup
    OR »RunServicesOnce **boxh=rundll32 C:\WINDOWS\WIN3C6.SWP,DllGetClassObject

    If this file does not exist skip to step 15.

  10. Write down the file name from that entry. In the above example the filename is c:\windows\system\msc.dll or for the second type c:\windows\win3c6.swp

  11. Now download Win98Fix.zip from http://www10.brinkster.com/expl0iter/freeatlast/Win98Fix.zip and extract it to c:\win98fix.

  12. Navigate to the c:\win98fix folder and double-click on the RunFix.reg. If it prompts whether or not you want to merge the information, click the Yes button.

  13. When that is done reboot your computer.

  14. Now find the file found in step 9, which should now be visible, and delete it.

  15. Now download Cwshredder from the link above.

  16. After you download the program, unzip it into the directory c:\cwshredder. Make sure all browser windows are closed and double-click on the cwshredder.exe to start the program.

  17. Next click on the FIX button, not the Scan Only button, and let it scan your computer. When it is done, exit the program.

  18. Next, using Internet Explorer, run both of these two online virus scans: http://housecall.antivirus.com/

    http://www.pandasoftware.com/activescan
  19. Please download and install the latest version of Ad-Aware from the link above.

  20. When you run the program make sure you update it and then scan with it and fix any problems it finds.

  21. Exit the program when you have fixed it everything it finds.

Now your computer should no longer be infected with the About:Blank hijacker. If you are still having problems and none of these steps worked, then please post a HijackThis log in our HijackThis Logs and Analysis forum  

This is a self-help guide. Use at your own risk.

BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.

If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.


BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams

  • Topic Starter

  • Admin
  • 43,618 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:17 AM

Posted 24 February 2005 - 11:27 PM

This fix is to be used for se.dll infections as well.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users