How to Get Rid of About Blank Pop Ups

by Thomas King

About Blank pop-ups are caused by a computer virus that hijacks your Web browser. In addition to flooding your computer with pop-up advertisements, the computer virus may change your Internet homepage, redirect your Internet searches, slow your computer, add icons to your desktop and decrease your available memory. If not removed, the virus will simply reinstall itself every time you start your system. Fortunately, the virus can be removed completely by following the steps below.

Run Your Antivirus Program

Open your antivirus program. If you do not have an antivirus program, consider downloading a free program, such as Windows Malicious Software Removal Tool or Bit Defender (see "Resources" below).

Update your antivirus program. Most antivirus programs include an "Update" or "Update Virus Definitions" option. If you do not know how to update your antivirus program, consult the manufacturer homepage.

Run a full scan of your computer using your antivirus program. Running a full scan of your computer with an up to date antivirus program should detect and remove the virus causing the About Blank popups. If it does not, continue to the next section to remove the virus manually.

End Infected Processes

Press "Ctrl" + "Alt" + "Delete."

Click on the "Task Manager" and then click on the "Processes" tab.

End the following processes. To end a process, right-click on it and select "End Process." "phafxfa.exe" "svhost.exe" "smbdins.exe" "sethcd.exe" "tsmsetup.exe"

Remove Infected Registry Values

Hold down the Windows key and press the "R" key at the same time. The "Run" box opens.

Type "regedit" into the Run box and click "OK." The Registry Editor opens.

Locate the following registry values in the left pane of the Registry Editor and delete them. To delete a registry value, right-click on it and select "Delete." "HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\toolbar {06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\explorer\\browser helper objects\\{b664647f-efd5-4837-a810-a807139107e5}" "HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\run network service" "HKEY_CLASSES_ROOT\\clsid\\{06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_CLASSES_ROOT\\clsid\\{b664647f-efd5-4837-a810-a807139107e5}" "HKEY_CLASSES_ROOT\\clsid\\{ce6a1268-9cc9-4ba3-8657-fe1132906cc4}" "HKEY_CURRENT_USER\\software\\microsoft\\internet explorer\\toolbar\\webbrowser {06abaa2d-34ab-4902-a326-409bd9b9a7a5}" "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\run network service"

Unregister Infected DLL Files

Hold down the Windows key and press "R." The Run box opens.

Type "cmd" into the Run box and click "OK." The Command Prompt opens.

Type the following into the Command Prompt. Be sure to press "Enter" after each line. “regsvr32 /u wdm.dll” “regsvr32 /u achpjba.dll” “regsvr32 /u cbme.dll” “regsvr32 /u se.dll” "regsvr32 /u iesp1.dll”

Delete Infected Files

Click on the "Start" menu.

Click on the "Search Programs and Files" box.

Search for and delete the following files. To delete a file, right-click on it and select "Delete." "ld[X].tmp" "syg.db" "spyfalcon.url" "blacklist.txt" "english.ini" "spyfalcon 2.0.lnk" "uninstall spyfalcon 2.0.lnk" "spyfalcon 2.0.lnk" "spyfalcon 2.0 website.lnk" "spyfalcon.lnk" "spyfalcon 2.0.lnk"

Photo Credits

  • Mensch und Computer 4 image by Sven Rausch from Fotolia.com