about blank

Den kan du nemt ændre inde i dine Funktioner->internetindstillinger->her i feltet skriver du navn på den side du vil have som startside

ohhh ok  er det en virus/spyware du mener, så skal jeg ikke blande mig.

Det er en virus - ja desværre. Jeg har haft den før, men kan ikke huske hvorledes den fjernes. Scanning hjælper ikke.

Følg vejledningen i denne artikel:
http://www.eksperten.dk/artikler/954

Jeg har prøvet de forskellige ting, uden at det har hjulpet.

Citat fra artiklen:
>> Gå ind her og hent Hijackthis. http://www.spywarefri.dk/vaerktoj.htm

Kør Hijackthis, scan, save log og kopier logfilen herind, så kigger vi på den.
Opret et spørgsmål i Virus kategorien, der er chancen størst for hjælp.
Lad være med at slette noget selv med Hijackthis, det kan skade mere end det gavner.
<<

Kom med logfilen.

ra~1\mcafee.com\vso\mcvsftsn.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Administrator\Lokale indstillinger\Temp\Midlertidig mappe 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Ad-Protect Toolbar - {EA038DDD-0FE0-41f5-BA60-FC3660529E71} - C:\Programmer\Ad-Protect\ToolBand.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Programmer\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmer\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Programmer\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmer\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\programmer\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmer\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmer\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmer\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\programmer\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmer\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O12 - Plugin for .spop: C:\Programmer\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143121500622
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1144967232420
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {94EB57FE-2720-496C-B33F-D9353C6E23F7} (F-Secure Online Scanner 2.1) - http://online-scanner.anti-virus.us.com/fscax.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} - http://scanner.virus112.com/cabs/cssweb.cab
O20 - Winlogon Notify: SASWinLogon - C:\Programmer\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Programmer\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Programmer\Webroot\Spy Sweeper\WRSSSDK.exe

Det ser ud som om, at about blank nu er forsvundet. Uvist af hvilken årsag.

Kan du finde SAS loggen, den vil jeg meget gerne se.

Start programmet igen, klik på Preferences, skift til fanebladet Statistics/Logs, i vinduet dobbeltklikker du på SUPERAntiSpyware Scan Log, den åbner i notesblok, kopier resultatet herind.

SUPERAntiSpyware Scan Log
Generated 04/19/2006 at 08:00 PM

Core Rules Database Version : 2879
Trace Rules Database Version: 1035

Memory threats detected  : 0
Registry threats detected : 11
File threats detected    : 18

Adware.Tracking Cookie
    C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1070738255[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1071183736[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@m1.webstats4u[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1071944778[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@overture[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@www.adprotect[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@indextools[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1070847646[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1070563868[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@mediaplex[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1071214352[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1070194600[1].txt
    C:\Documents and Settings\mogens\Lokale indstillinger\Temp\Cookies\mogens@cz3.clickzs[2].txt
    C:\Documents and Settings\mogens\Lokale indstillinger\Temp\Cookies\mogens@track.adform[2].txt
    C:\Documents and Settings\mogens\Lokale indstillinger\Temp\Cookies\mogens@www.livewebstats[1].txt

Trojan.Security Toolbar
    C:\Documents and Settings\All Users.WINDOWS\Menuen Start\Online Security Guide.url
    C:\Documents and Settings\All Users.WINDOWS\Skrivebord\Online Security Guide.url

Trojan.Spy-Shield/BON
    HKCR\Interface\{214345B8-BB69-498D-A168-29F58F15D806}
    HKCR\Interface\{214345B8-BB69-498D-A168-29F58F15D806}\ProxyStubClsid
    HKCR\Interface\{214345B8-BB69-498D-A168-29F58F15D806}\ProxyStubClsid32
    HKCR\Interface\{214345B8-BB69-498D-A168-29F58F15D806}\TypeLib
    HKCR\Interface\{214345B8-BB69-498D-A168-29F58F15D806}\TypeLib#Version
    HKCR\Interface\{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}
    HKCR\Interface\{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}\ProxyStubClsid
    HKCR\Interface\{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}\ProxyStubClsid32
    HKCR\Interface\{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}\TypeLib
    HKCR\Interface\{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}\TypeLib#Version
    HKCR\AppId\{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}

Nu kom about blank igen

Kom med en ny Hijackthislog, denne gang skal vi have det hele med.

Er det kun fordi du ikke kan skifte startside?
Hvis ja, højreklik på SpySweeper, nede ved uret, vælg Shut down, skift startside, genstart.

TDCspace du skal lige hente point retur her.. http://www.eksperten.dk/spm/703923 (eller også kan i vente til fromsej er færdig også kan han få dem direkte der)

Jeg skifter startside, som du foreskriver, men når PC har været slukket, kommer about blank igen.

Lad os se en ny Hijackthislog, denne gang hele loggen.