About:Blank hijackings are
usually caused by spyware browser hijackers and may also involve download
trojans, backdoor trojans and computer worms infecting your computer. In the
past it was possible to manually remove some of these infections but they are
becoming increasingly more sophisticated so that it has now reached a point
where most anti-spyware programs can no longer detect and remove them. To
remove them you need to scan your system with an equally sophisticated spyware
removal tool capable of removing the computer worms, trojans and
spyware browser hijackers that can cause this problem.
About:Blank Behavior And Why They're So Difficult To Remove
In
a small percentage of cases the cause may be due to a startpage trojan or the
"I Love You" worm, which sets the browser homepage to a blank page.
However, the main cause of this problem is due to CWS browser hijacker
infections also known as the HomeOldSP hijacker. Browser hijackers are not
viruses and are therefore undetectable by anti-virus programs. The browser
hijackers that cause this problem replace your browser start page with a HTML
file that resides on your computer which characteristically has its address set
to 'about:blank'. It has the appearance of a search engine with links to
various products for sale [screenshot]. Income is earned by its owners
and affiliates if you visit any of these paid ad links.
A BHO (Browser Helper Object) is
installed in your web browser which consumes system resources slowing down your
computer and internet connection. This BHO is associated with a hidden DLL
defined in registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Windows\\AppInit_DLLs. The more sophisticated variants
dynamically change their executable to evade the simple hash recognition
methods used by the majority of anti-spyware programs. Executable code may be
stored in your browser's cache. Hidden dlls will restore the hijacker if its
files are deleted and they can be difficult to purge from memory. They can
restore their registry definitions if they've been deleted. They start with
Windows and can restore their Windows startup settings if they've been deleted.
Other behaviors include changing your
default search settings, displaying pop-up ads and installing a trojan known as
Downloader.Trojan. This trojan creates a serious security risk as it can in turn
download dangerous worms and backdoor trojans onto your PC.
- Download
and Install STOPzilla Anti-Spyware. - STOPzilla Anti-Spyware is a
reputable program that will fix this problem by removing a broad spectrum
of spyware, browser hijackers, trojans and computer worms associated with
about:blank hijacks:
- Delete
all your temporary files - click Start, click Run and type
'cleanmgr', hit Enter.
- Run
STOPzilla
- Run a full system scan and fix the detected infections.
- Reboot
- Run
STOPzilla again
- Run a full system scan and remove any remaining infections.
Once you've removed the hijacker your
computer will return to normal and you'll have total control to change your
browser homepage and default search page. To change the homepage, in Internet
Explorer click 'Tools', select 'Internet Options' and update the address for
the default homepage. The procedure to change the default search page may vary.
Follow which ever options are presented to you as follows:
In
Internet Explorer:
|
Otherwise,
if the Customize button isn't shown:
10. click 'Autosearch Settings'
11. select a search engine and click
OK.
|