How to Get Rid of "About: Blank" in Microsoft Internet Explorer

The \"About: Blank\" virus redirects your Web searches.

\"About: Blank\" is a browser hijacker virus. This means that it may change your Internet Explorer homepage and redirect your Web searches to pornographic sites. In addition to taking control of your Internet Explorer Web browser, the \"About: Blank\" virus may slow your computer, download additional viruses and change your desktop settings. The easiest way to remove the \"About: Blank\" virus is to run your anti-virus program. However, in the event that the \"About: Blank\" virus disables your anti-virus program, you can remove the virus manually from your Windows 7-based computer.

Instructions

End Infected Processes

1. Press \"Ctrl\" + \"Alt\" + \"Delete.\"

2. Click on the \"Task Manager\" and then click on the \"Processes\" tab.

3. End the following processes: (To end a process, right-click on it and select \"End Process.\")<br /><br />\"phafxfa.exe\"<br />\"svhost.exe\"<br />\"smbdins.exe\"<br />\"sethcd.exe\"<br />\"tsmsetup.exe\"

Delete Infected Registry Values

1. Hold down the Windows key and press \"R.\" The Run box will open.

2. Type \"regedit\" (without the quotation marks) into the Run box and click \"OK.\" The Registry Editor will open.

3. Locate the following registry values in the left pane of the Registry Editor and delete them: (To delete a registry value, right-click on it and select \"Delete.\")<br /><br />\"HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\toolbar {06abaa2d-34ab-4902-a326-409bd9b9a7a5}\"<br />\"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\explorer\\browser helper objects\\{b664647f-efd5-4837-a810-a807139107e5}\"<br />\"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\run network service\"<br />\"HKEY_CLASSES_ROOT\\clsid\\{06abaa2d-34ab-4902-a326-409bd9b9a7a5}\"<br />\"HKEY_CLASSES_ROOT\\clsid\\{b664647f-efd5-4837-a810-a807139107e5}\"<br />\"HKEY_CLASSES_ROOT\\clsid\\{ce6a1268-9cc9-4ba3-8657-fe1132906cc4}\"<br />\"HKEY_CURRENT_USER\\software\\microsoft\\internet explorer\\toolbar\\webbrowser {06abaa2d-34ab-4902-a326-409bd9b9a7a5}\"<br />\"HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\run network service\"

Delete Infected DLL Files

1. Hold down the Windows key and press \"R.\" The Run box will open.

2. Type \"cmd\" into the Run box and click \"OK.\" The Command Prompt will open.

3. Type the following into the Command Prompt: (Be sure to press \"Enter\" after every line.)<br /><br />“regsvr32 /u wdm.dll” <br />“regsvr32 /u achpjba.dll” <br />“regsvr32 /u cbme.dll” <br />“regsvr32 /u se.dll” <br />“regsvr32 /u iesp1.dll”

Delete Infected Files

1. Click on the \"Start\" menu.

2. Click on the \"Search Programs and Files\" box.

3. Search for and delete the following files: (To delete a file, right-click on it and select \"Delete.\")<br /><br />\"ld[X].tmp\"<br />\"syg.db\"<br />\"spyfalcon.url\"<br />\"blacklist.txt\"<br />\"english.ini\"<br />\"spyfalcon 2.0.lnk\"<br />\"uninstall spyfalcon 2.0.lnk\"<br />\"spyfalcon 2.0.lnk\"<br />\"spyfalcon 2.0 website.lnk\"<br />\"spyfalcon.lnk\"<br />\"spyfalcon 2.0.lnk\"

References

• FasterPCCleanClean: How to Remove AboutBlank