A friend of mine is having problems with his computer. He's RUNNING XP and IE6. Whenever I open IE, the opening page address is "about:blank". I can change the home page and it will stay like that until IE is closed. The next time I open it, the same page re-appears. I've installed Spybot and removed all spyware and ADWARE. Any ideas about what's happening here?did you change the homepage in controlpanel > internet options? ..... i had the same problem once... Try scanning with spybot S&D agian... try even tojanhunter..... www.trojanhunter.comSuperDave.....Your friends pc is infected with a browzer hijacker... To get rid of it you should D/l ......hijackthis and CW Shredder ........get them here and do some reading up on hijackers....
http://www.net-integration.net/tools/hijackthis.html
let us KNOW how you make out

dl65  Thanks guys/gals. I will try all of these starting with changing the home page from the control panel. I've seen a computer which was hijacked before and what I find strange is that this one is going to "about:blank" as the home page. Usually a hijacker will direct the home page to a page of their own choosing. I've have run Spybot twice and even ran a scan with his own anti-virus program. I'll let you all know how I make out.Either this>http://www.wilderssecurity.net/bhblaster.html   or shredder is what you need.SuperDave.......It's not so strange.......I had a go round with a hijacker a while back and it was the "about blank"
page that is changed to ......

run hijackthis and then check each log entry and then remove the bad entries .....and the issue will be resolved

let us know how you fare .

dl65 I checked his computer tonight and found 42 trojans with trojan hunter but I can't find all the files to delete them. Is it possible some of these are in hidden files? Are there any trojan cleaners in FREEWARE?SuperDave........Have you made sure that when you search for those items.....that the search is set up to check hidden folders.....click advanced and be sure that all are ticked.  If you are doing it manually......go to control panel......click on file options...click the view tab...scroll down and tick show hidden files and tick show hidden system files ( not recommended).

If the homepage is still being changed ...run highjackthis and post the log here.....let us look at it...
perhaps we can help.

dl65 I tried trojanhunter on my own computer last night and it found two trojan files and cleaned them so I'm going to give it another try with this program. One interesting thing, while I was running the scan a pop-up from my anti-virus told me that it had found and disinfected a virus. I wonder how that got in?anti-virus told me that it had found and disinfected a virus. I wonder how that got in? superdave
-----------------------------------------------------------------------
Via system restore..?and connected to the net?I worked on the computer this morning and I was successful in cleaning all the trojans and spyware using SpyBot and Trojanhunter but the home page is still being hijacked. I know there is still something there because I'm getting pop-ups even though I've installed SP2 and Pop-up Stopper. I'm going to try CWshredder and Hijackthis the next chance I get and I'll post the Hijackthis log here so you all can have a look at it.It is definately a spyware/adware problem. Go to www.pctools.com and get registry mechanic and/or spyware doctor. They will probably find much more viruses then spybot (personal experience). They are unlicensed versions but they do find the viruses. You have to go and remove the viruses from the registry yourself. (or you can just search for a crack for the programs that way the "full licensed version" will delete it for you.)I did some more work on his computer and cleared up all the trojan files using CWshredder and trojan hunter. I then install SpyWareGuard and ran Trojan Hunter again. This seems to have fixed one problem; The hijacking of the home page but there is still some spyware/adware in the Registry and I didn't feel comfortable enough to mess around with the Registry on someone else's computer. One interesting thing did happen. I ran "Hijackthis" and sent a copy of the log report to my home address so I could share it on this forum. When I got home, I discovered that the file had been deleted from the message by my internet server because it contained the Bloodhound.Exploit.6 virus. I'm wondering where this virus CAME from. Is it possible that it is on his computer even though he has Panda anti-virus protection with a firewall?There are programs that can both clean and make backups of your registry.

Advanced System Optimizer V2

You can then freely remove Registry entries once you have made backups.SuperDave......Re the virus.....I would think that the virus came from his machine.......And I don't dont know if Panda is configured to scan outgoing mail...I'll bet it isn't.
The firewall would not prevent a virus.
Go to .... http://securityresponse.symantec.com/avcenter/venc/data/bloodhound.exploit.6.html

let us know

dl65