Ben,

For why this is happening see
http://www.lavahelp.com/articles/v6/04/05/1801.html. Basically if you wish to
use about:blank as your homepage (I do) and have no issues with it such as a
hijack then when using AdAware add about:Blank to the ignore list.
--
Mike Maltby MS-MVP



Ben B. wrote:

Mike, here is the HijackThis log.

Logfile of HijackThis v1.98.0
Scan saved at 12:49:05 AM, on 04/07/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
E:\PROGRAM FILES\AVG\AVGSERV9.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
E:\PROGRAM FILES\AVG\AVGCC32.EXE
E:\PROGRAM FILES\MSGTAG\MSGTAG.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
E:\PROGRAM FILES\BHODEMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AVG_CC] E:\PROGRA~2
\AVG\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common
Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\RunServices: [*StateMgr]
C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [Avgserv9.exe] E:\PROGRA~2
\AVG\Avgserv9.exe
O4 - HKCU\..\Run: [MSGTAG] "E:\PROGRAM
FILES\MSGTAG\MSGTAG.EXE" /startup
O4 - Startup: BHODemon 2.0.lnk = E:\Program
Files\BHODemon.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-
00C0F0318AFE} - (no file)
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-
CA6EE38B68A8} - (no file)
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-
9DF6-CA6EE38B68A8} - (no file)
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1
\Plugins\NPBelv32.dll
O16 - DPF: HushEncryptionEngine -
https://mailserver3.hushmail.com/sha...ncryptionEngin
e.cab