Re: Blank message bodies ... more

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: PA Bear (PABear_at_mvps.org)
Date: 03/16/04


Date: Mon, 15 Mar 2004 20:21:35 -0500

Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm (see Quick Fix, to which I'd add Spybot)

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the HijackThis Logs forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

I suggest doing the above in this order:

- virus update & scan
- CWShredder ("fix" all found)
- Ad-Aware ("fix" all found)
- Spybot ("fix" all items in red, generally)

-- 
~PA Bear
Len Jenski wrote:
> Robert,
>
> Got SysInternal's FileMon tool. Pretty difficult to use because there are
> so many processes creating/deleteing files. I was able to identify the
> "About_Blank[1]" file. It did not get created when I opened the email. It
> did get created when I did the <crtl>F2?
>
> As for these statements:
>
> "It looks as if using the Include filter  msimn*create would be enough to
> see exactly what the filenames involved are. However, in order to see more
> detail (which could include error status) you would have to choose a
> looser criterion."
>
> I am not sure what command you are describing to me? You need to provide
> me with more detail on what you are asking me to do. Remember that I am
> not familiar with FileMon.
>
> Len Jenski
>
>
> "Robert Aldwinckle" <robald@techemail.com> wrote in message
> news:OEVbOrmBEHA.2404@TK2MSFTNGP11.phx.gbl...
>>> If opened a file called "about_blank[1]" in notepad
>>
>> I think that this may be a huge clue.   It may be implying that
>> the file was created but for some reason  About:Blank  was used
>> instead when it was supposed to be rendered.   That would certainly
>> explain why you wouldn't see anything.   ;-)
>>
>> You may get some more detail along that tack by using  SysInternal's
>> FileMon tool.   It looks as if using the Include filter  msimn*create
>> would be enough to see exactly what the filenames involved are.
>> However, in order to see more detail (which could include error status)
>> you would have to choose a looser criterion.
>>
>>
>> Good luck
>>
>> Robert
>> ---
>>
>>
>> "Len Jenski" <ljenski@ameritech.net> wrote in message
> news:OBT8qlkBEHA.3256@TK2MSFTNGP09.phx.gbl...
>>> Robert,
>>>
>>> I have the same problem of missing text in OE6. I opened a message that
>>> was blank and did a crtl-F2.
>>> If opened a file called "about_blank[1]" in notepad and the file
>>> contained the text "<div>&nbsp;</div>" ?
>>>
>>>
>>> --
>>> Len Jenski
>>> ljenski@ameritech.net
>>>
>>>
>>> "Robert Aldwinckle" <robald@techemail.com> wrote in message
>>> news:e8%23PFefBEHA.2500@TK2MSFTNGP12.phx.gbl...
>>>>> There is the occasional NG post which shows on my OE
>>>>> with a blank message body.
>>>>
>>>> Please post the Message-ID of any news message which gives you
>>>> the symptom.
>>>>
>>>> What are your Fonts... and International settings...
>>>> Have you tried experimenting with different fonts?
>>>>
>>>> Also font related:
>>>>
>>>> See  if   Ctrl-F2  lets you see anything and if not what is in the file
>>>> that that command creates.   BTW the same file can be found in the TIF
>>>> and then rendered by IE; so that could be a useful comparison too.
>>>>
>>>> See if   View, Text Size, Fixed  lets you see anything.
>>>>
>>>>
>>>> ---
>>>>
>>>>
>>>> "Kenny M" <nobody@nospam.nowhere> wrote in message
>>>> news:eDFMqrYBEHA.628@TK2MSFTNGP10.phx.gbl...
>>>>> I don't know whether this is relevant to all the other posts
>>>>> concerning blank/empty message bodies, but FWIW ...
>>>>>
>>>>> There is the occasional NG post which shows on my OE with a blank
>>>>> message body.
>>>>> In each case the message appears to have been encoded as:
>>>>> Content-Type: text/plain; charset="Utf-8"
>>>>> and the OE Active Title Bar, which usually shows {Subject}, shows
>>>>> instead: {Subject} - Unicode (UTF-8)
>>>>>
>>>>> Do you think this might be related to the other blank message body
>>>>> problems, and if not, is there some way to fix this on my machine? I
>>>>> can see all my e-mail and 99% of NG posts.
>>>>>
>>>>> TIA


Relevant Pages

  • Re: Windows Security Update cd- ready for a challenge?
    ... How does "the JAVA VM exploit" figure in your problem? ... Advanced users will find Spybot a useful tool but none of them are worth ... HijackThis won't take care of anything on its own. ... CWShredder (fix all found) ...
    (microsoft.public.security)
  • Re: about:blank
    ... HijackThis, below, in that order). ... The process of removing certain malware may kill your internet connection. ... If it has to fix ... Another excellent program for this purpose is SpyBot Search and Destroy ...
    (microsoft.public.security.virus)
  • Re: IE 6 Home page gets hijacked by about:blank
    ... HijackThis, below, in that order). ... The process of removing certain malware may kill your internet connection. ... If it has to fix ... Another excellent program for this purpose is SpyBot Search and Destroy ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: cant set home page
    ... The best tool involves HijackThis and expert advice. ... Start by downloading each of the following free tools: ... Spybot S&D has an install routine - run it. ... Have the latter fix all. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Denied access on IE
    ... > WShredder (fix all found) ... > ask for more advice on one of the other forums afterwards.. ... Error Message When You Attempt to Connect to a Secure Zone Web ... When all else fails, HijackThis ...
    (microsoft.public.windows.inetexplorer.ie6.browser)