DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   about: blank virus (http://www.daniweb.com/forums/thread22511.html)

zexy Apr 27th, 2005 3:11 am
Re: about: blank virus
 
I shall delete it. I am on a deletion spree!

dlh6213 Apr 27th, 2005 5:19 am
Re: about: blank virus
 
Go to Add/Remove Programs in your Control Panel and remove Viewpoint Manager

Scan with HJT and have it fix this entry (if found):

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

Go to C:\Program Files and delete the Viewpoint folder

DMR Apr 27th, 2005 1:49 pm
Re: about: blank virus
 
Quote:

Originally Posted by Kinseeker69
There's actually an uninstaller for about:bank I had it but lost it when i caught the Blaster virus.

Unfortunately, the original "About:Blank" hijacker has now grown/morphed into a family consisting of close to 10 variants. There was an uninstaller (and perhaps a few) that worked for the early incarnations of the infection, but AFAIK there's no single "uninstall" program that can whack all all of the current incarnations.

DMR Apr 27th, 2005 2:08 pm
Re: about: blank virus
 
Quote:

Originally Posted by zexy
I was unable to delete the O23 security thing. It simply came back after HJT nixed it...

That's because when HJT performs a normal "fix" on an 023 entry, it will disable the service, but it does not remove references to the service that exist in the Windows Registry.

HJT does have a special function for deleting a service from the Registry, although in this case I'm not sure it will work because the service name consists of non-standard "gobbledy-gook" characters.

You can try it anyway and see what happens if you want:


In the main HJT window, click on Config, then Misc Tools, and then press the Delete an NT service.. button.

In the resulting Delete window, enter " 11Fßä#·ºÄÖ`I" (omit the quotes, and note that the first character of the name is a blank space) and then press OK.

zexy May 1st, 2005 1:08 am
Re: about: blank virus
 
Done and tried. Viewpoint manager is gone, and the O23 thing remains, because nothing happened.

You people rock.

DMR May 1st, 2005 1:46 am
Re: about: blank virus
 
I'll try to post more info on how to delete the "023" service entry ASAP, but I need to log for the night now. Glad we could help you get the rest fixed though. :)


All times are GMT -4. The time now is 6:37 pm.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC