Wednesday, September 22, 2010

Computers - How to Stop Pop-ups From 'About Blank'

How to Stop Pop-ups From 'About Blank'

Browser hijackers redirect URLs.
Browser hijackers redirect URLs.
www and internet image by mbs from Fotolia.com
The "About Blank" pop-ups are the result of a browser hijacker, which is a virus. It will change your homepage and redirect searches to random websites that may be dangerous for your PC. The virus can also disable your anti-virus program. This is a difficult virus to remove with ordinary anti-virus programs because the virus hides certain files from the computer. The best way to stop pop-ups from "About Blank" is to remove every trace of it manually.
Difficulty: Easy

 

Instructions

  1. Right-click on your system tray, which is the bar at the bottom of your desktop screen. Choose "Task Manager" from the options and wait for it to load.

  2. Click on "Processes" and then find these file names:



    sethcd.exe

    smbdins.exe

    phafxfa.exe

    svhost.exe

    tsmsetup.exe
  3. Click on them and press "End Process" to remove them.

  4. Go to "Start" and "Run." Type "Regedit" and press "Enter" to load the Registry Editor menu on your screen.

  5. Go to "Edit" on the toolbar. Click on "Find" and type these Registry keys into the blank box. Press "Enter" to search for them.



    HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar {06abaa2d-34ab-4902-a326-409bd9b9a7a5}



    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b664647f-efd5-4837-a810-a807139107e5}



    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run network service



    HKEY_CLASSES_ROOT\clsid\{06abaa2d-34ab-4902-a326-409bd9b9a7a5}



    HKEY_CLASSES_ROOT\clsid\{b664647f-efd5-4837-a810-a807139107e5}



    HKEY_CLASSES_ROOT\clsid\{ce6a1268-9cc9-4ba3-8657-fe1132906cc4}



    HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser {06abaa2d-34ab-4902-a326-409bd9b9a7a5}



    HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run network service

  6. Right-click on the keys and choose "Delete" from the options menu.

  7. Go to "Start" and "Run." Type "cmd" and press "Enter." Wait for the Command Prompt to load on your screen.

  8. Type "regsvr32 /u [DLL_NAME]," but replace "[DLL_NAME]" with these file names:



    wdm.dll

    achpjba.dll

    cbme.dll

    se.dll

    iesp1.dll

  9. Press "Enter" after typing in each file name to unregister the DLLs.

  10. Go to "Start" and "Search." Look in "C" drive for these files:



    ld[X].tmp

    syg.db

    spyfalcon.url

    blacklist.txt

    english.ini

    uninstall spyfalcon 2.0.lnk

    spyfalcon 2.0 website.lnk

    spyfalcon.lnk

    spyfalcon 2.0.lnk

  11. Click on each file and press your "Delete" button to erase them permanently. Reboot your computer.

No comments:

Post a Comment