How to Remove "About Blank"

It may not be as harmful as some computer viruses, but the About Blank virus is one of the most frustrating computer viruses around. The About Blank virus changes your Internet homepage and redirects all of your Internet searches to international, pornographic and blank websites. Apart from being websites that you didn’t intend to visit, many of these websites are malicious and result in additional malware being downloaded onto your computer.

...
The About Blank virus hijacks your Internet browser.

Remove DLLs and Kill Processes

Step

Click on the "Windows Start Menu" icon and type "cmd" into the "Search Programs and Files" box. Press "Enter." The "Command Prompt" opens. Note that you may have to click "Yes" to allow the "Command Prompt" to open.

Step

Type the following commands into the "Command Prompt":

Step

regsvr32 /u name.dll regsvr32 /u wdm.dll regsvr32 /u achpjba.dll regsvr32 /u cbme.dll regsvr32 /u se.dll regsvr32 /u iesp1.dll taskkill /phafxfa.exe taskkill /svhost.exe taskkill /smbdins.exe taskkill /sethcd.exe taskkill /tsmsetup.exe

Step

Press "Enter" after each command. These command will remove the DLLs and kill the processes associated with the About Blank virus.

Step

Close the "Command Prompt."

Delete Registry Values

Step

Click on the "Windows Start Menu" icon and type "regedit" into the "Search Programs and Files" box. Press "Enter." The "Registry Editor" opens. Note that you may have to click "Yes" to allow the "Registry Editor" to open.

Step

Delete each of the following registry values from the left pane of the "Registry Editor":

Step

"HKEY_LOCAL_MACHINE\software\Microsoft\internet explorer\toolbar {06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\explorer\browser helper objects{b664647f-efd5-4837-a810-a807139107e5}" "HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\run network service" "HKEY_CLASSES_ROOT\clsid{06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_CLASSES_ROOT\clsid{b664647f-efd5-4837-a810-a807139107e5}" "HKEY_CLASSES_ROOT\clsid{ce6a1268-9cc9-4ba3-8657-fe1132906cc4}" "HKEY_CURRENT_USER\software\Microsoft\internet explorer\toolbar\webbrowser {06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_CURRENT_USER\software\Microsoft\windows\currentversion\run network service"

Step

To delete a registry value, right-click on it and select "Delete."

Step

Close the "Registry Editor."

Delete Files

Step

Click on the "Windows Start Menu" and then click on the "Search Programs and Files" box.

Step

Search for and delete each of the following files:

Step

ld[X].tmp syg.db spyfalcon.URL blacklist.txt english.ini spyfalcon 2.0.lnk uninstall spyfalcon 2.0.lnk spyfalcon 2.0.lnk spyfalcon 2.0 website.lnk spyfalcon.lnk spyfalcon 2.0.lnk

Step

To delete a file, right-click on it and select "Delete."

Step

Restart your computer. The About Blank virus is removed.