I shall delete it. I am on a deletion spree!

Go to Add/Remove Programs in your Control Panel and remove Viewpoint Manager

Scan with HJT and have it fix this entry (if found):

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

Go to C:\Program Files and delete the Viewpoint folder

Unfortunately, the original "About:Blank" hijacker has now grown/morphed into a family consisting of close to 10 variants. There was an uninstaller (and perhaps a few) that worked for the early incarnations of the infection, but AFAIK there's no single "uninstall" program that can whack all all of the current incarnations.

That's because when HJT performs a normal "fix" on an 023 entry, it will disable the service, but it does not remove references to the service that exist in the Windows Registry.

HJT does have a special function for deleting a service from the Registry, although in this case I'm not sure it will work because the service name consists of non-standard "gobbledy-gook" characters.

You can try it anyway and see what happens if you want:


In the main HJT window, click on Config, then Misc Tools, and then press the Delete an NT service.. button.

In the resulting Delete window, enter " 11Fßä#·ºÄÖ`I" (omit the quotes, and note that the first character of the name is a blank space) and then press OK.

Done and tried. Viewpoint manager is gone, and the O23 thing remains, because nothing happened.

You people rock.

I'll try to post more info on how to delete the "023" service entry ASAP, but I need to log for the night now. Glad we could help you get the rest fixed though.