about:blank

[fbram]

When I try to read my Yahoo Mail, after 5 seconds the page disappears and is replaced by a blank page. Address bar reads "about:blank."  

If I do nothing but observe, after 30 minutes there are 20 tabs open, all of them "about:blank."

[AdvancedSetup]

Hello @fbram

Let's start off with the following and see if that corrects the issue or helps us to locate the issue.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan Now.
• When finished, please click Clean & Repair.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

[fbram]

Export Summary.txt

[fbram]

Did you receive the Export Summary?  I received a message indicating that an error ocurred in the transmission.  I am ready to began Step 3, now.

 

I had to reset MWB password twice b/c it was not recognized. Both times I had to go to yahoo mail to follow the instructions  for the reset. Neither time did 

the email disappear. Neither time did a blank page appear nor did "about:blank" begin self-replicating in the addrress bar. Just now, 

I returned to yahoo mail and read two emails and nothing bad happened. I have had  the"about:blank" problem since14:00 this afternoon.  I think I will continue with Step 3 anyway. 

 

 

[fbram]

Export Summary.txtExport Summary.txt

[fbram]

This afternoon I did a scan which showed no threats. I also re-started the computer several times. The "about:blank" problem continued. 

[AdvancedSetup]

Please run step 3 and post back both logs as an attachment and I'll review sometime this weekend.

Thanks

 

[fbram]

 

 

Timeline:

Friday 14:00-21:00 -Every email I opened on YahooMail was replaced within about 5 seconds by a blank page.  "about:blank" appeared in the address bar. When I deleted the "about:blank," the email I had been reading reappeared, but only for about 5 seconds. It was always replaced by "about:blank." The "about:blank"  slowly self-replicated, filling up  the address bar .  

 

Around 21:00 - In desperation, I decided to seek the help of Malwarebytes. To enter the Forum, I had to reset my password twice. After the first reset, my password still was not recognized. Each time I reset my password, I had to go to  YahooMail to clic on the link. I did not realize  that I was able to do this without the previous interruption from "about:blank." The email from Malwarebytes remained open with no interference from "about:blank" 

 

Although I did not realize it, the problem was resolved. Blind to the resolution of the problem and happy to have a response from MWB, I followed the instructions and did a scan and restart.  

 

This morning, Saturday, everything is working fine. 

 

I do not understand what happened to my computer, but I am very happy to have it working well again.  Thank you for trying to help me.

 

I will follow Step 3 now and send results.

[fbram]

Windows Defender is interfering with the download of the Farbar Recovery Tool.  

[fbram]

 

Here are the files requested. 

Farbar results indicate that Edge is my default  browser; however,  I always use Google Chrome.

FRST.txt Addition.txt 1189289722_ExportSummary.txt

[AdvancedSetup]

I would highly suggest you uninstall the following application

App Explorer (HKU\S-1-5-21-2442438489-1436764340-1798239245-1001\...\Host App Service) (Version: 0.273.3.484 - SweetLabs) <==== ATTENTION
App Explorer (HKU\S-1-5-21-2442438489-1436764340-1798239245-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06162019091752420\...\Host App Service) (Version: 0.273.3.484 - SweetLabs) <==== ATTENTION
App Explorer (HKU\S-1-5-21-2442438489-1436764340-1798239245-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06162019091755092\...\Host App Service) (Version: 0.273.3.484 - SweetLabs) <==== ATTENTION

 

Please also follow the directions from the following topic to clean up Google Chrome

 

Thank you

Ron

 

[fbram]

You indicated that I remove 3 App Explorer Programs.  I found only one. I disintalled it.

I will do the cleanup a little later.

[AdvancedSetup]

Yes, it's only a single installation but it left 3 entries. Removal of the one should remove all of those entries.

Please go ahead and post the follow-up new logs when ready

Thanks

 

[fbram]

Chrome cleanup is unfinished. I arrived at Step5 and spent an hour trying to find the prompt to sign out of Chrome.  I never found it.  I am quitting until tomorrow.  

I am sending  the export summary after I deleted the file you suggested.

 

Export Summary2.txt

[AdvancedSetup]

From the main page of Google.com you can see your logon indicator on the top right portion of the web page. Clicking on the colored icon should show your account as well as a button to log out.

 

 

 

Sign out of Chrome
https://support.google.com/chrome/answer/9159867?hl=en

How to Sign Out of Google Chrome
https://www.wikihow.com/Sign-Out-of-Google-Chrome

How to Sign Out of Chrome
https://www.lifewire.com/sign-out-of-chrome-4584403

 

 

Below is another method you can use to clear Google Chrome settings.

Chrome

 

Reset Chrome back to defaults to completely clear out issues with Chrome.

• Open Chrome and at the top right, click  More tools  Extensions
• Write down the list of Extensions installed.
• Next, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
   
  • 
     
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues and let me know the results

Thanks

Ron

 

 

Edited June 18, 2019 by AdvancedSetup
updated information

[fbram]

This morning I returned to Chrome, re-activated sinchronization, and repeated all the steps specified by the Belgian girl. I have attached the Summary from the lastest MWB scan.   Do you think the "about.blank"  was the result of a PUP?  I want to save all the instructions you gave me.  

Do you think Firefox is a better choise than Chrome?  I have not used Firefox because I need a program like GoogleTranslator, and also I don''t know how to move LastPass to Firefox.

I greatly appreciate your help during the past three days.  You are a valuable resource!!!

Export Summary3.txt

[fbram]

In addition to following your recomendations, yesteday I changed my YahooMail password.  Today, a friend informed me that on June 11 he received spam from my email account.

[AdvancedSetup]

How is the computer running now? @fbram

Is your blank page issue gone now?

Personally I prefer Mozilla Firefox. Google makes most of it's money from advertising and much of that is user metrics,etc. 

 

 

Google Just Gave 2 Billion Chrome Users A Reason To Switch To Firefox
https://www.forbes.com/sites/kateoflahertyuk/2019/05/30/google-just-gave-2-billion-chrome-users-a-reason-to-switch-to-firefox/#7a3fe78e751f

 

Edited June 19, 2019 by AdvancedSetup
updated information

[AdvancedSetup]

Let's get real. If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. 
If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though)

Help Secure your browsers
 
Please install uBlock Origin for your browsers to better protect your system

FireFox, Chrome, Opera , Safari, Microsoft Edge
AdBlock for Internet Explorer
How to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018

This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settings

Browser push notifications: a feature asking to be abused
HTTPS Everywhere
NOTHING TO HIDE documentary

Review your email and Office choices

Quit Gmail for free encrypted email - Tutanota
Why ProtonMail Is More Secure Than Gmail
LibreOffice - Free and open source office suite

Use Password Management software

Bitwarden
KeePass Password Safe

Encrypted Instant Messenger and Voice Calls

Riot
Signal
Wickr Me

Follow-up Reading

Everything you need to know about cybercrime
10 easy ways to prevent malware infection 
Keep your data backed up

Thank you for choosing Malwarebytes  as your preferred security protection software and tell your friends and family too. We're here to help.

Ron

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks