Solved

Virus in IE6 when the enter key is pressed?

Posted on 2003-11-28
10
636 Views
Last Modified: 2006-11-17
Strangest thing started happening in IE6 about a two weeks ago.  Whenever the enter key is pressed in a form field, the following events occur.

1.)  The cursor disappears and the focus leaves the open IE window.  You have to click the mouse to get the focus to return to the open window and to continue typing in the form.
2.)  Nothing else visible happens. However, by using alt-tab, I can see that another instance of IE has been opened.  The target for that instance is https://3d-images.org/.  However, a window never opens.  If I alt-tab again, the other browser instance is closed.
3.)  The same happens if I use the enter key in the Address box, except that the focus automatically returns to my IE instance once the new page loads.

I have tried to de-install IE6, but it's not on the add/remove programs list, even after I removed the latest Service Pack.  I am running Windows 2000.  I don't know what event may have caused this to happen.  I do run McAfee, and it hasn't identified anything.  I am also running The Cleaner, which also hasn't recognized anything.  

I'm not sure if this helps, but here's the registration info for https://3d-images.org/:
 brigada   elizabet str 65   Denver, Colorado 80206   United States   Registered through: GoDaddy.com   Domain Name: 3D-IMAGES.ORG      Created on: 20-Oct-03      Expires on: 20-Oct-04      Last Updated on: 20-Oct-03   Administrative Contact:      beliy, alex  romanov@kmv.ru      brigada      elizabet str 65      Denver, Colorado 80206      United States      3037874636   Technical Contact:      beliy, alex  romanov@kmv.ru      brigada      elizabet str 65      Denver, Colorado 80206      United States      3037874636   Domain servers in listed order:      NS1.BESTPROMOTION.BIZ      NS2.BESTPROMOTION.BIZ
0
Comment
Question by:ArmchairHistorian
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 97

Expert Comment

by:war1
Comment Utility
Greetings, ArmchairHistorian!

1. There may be programs running in the background interfering with the operation of Internet Explorer. If you have Norton programs running in the background, temporarily turn them off, including anti-virus, win doctor, recycle bin protect, and clean sweep. Does this fix the problem?

Turn off any firewall or ad-blocker.

2. Perform a repair of Internet Explorer. From Control Panel select Add/Remove Programs. Scroll down to Microsoft Internet Explorer and highlight it. Click on the Add/Remove button. When the IE Tools menu comes up, select Repair. Click OK.

You can also access the IE Toolbar by clicking Start > Run and type

rundll32 setupwbv.dll,IE6Maintenance


Best wishes, war1
0
 
LVL 97

Expert Comment

by:war1
Comment Utility
You may be affected by spyware.

1. If you have Windows Messenger Service, disable it.  The Messenger service is typically not needed for home users.

Right-click My Computer and click Manage.
Fold out the Services and Applications option and click Services.
Right-click the Messenger entry, select Properties, and choose Disable under Startup Type.
Click OK.

You should no longer receive messages sent via the messenger service.

2. Use the following scanners to find and remove the website.

SpyBot S&D searches your harddisk for so-called spy- or adbots;
http://security.kolla.de/
or
Adaware
http://www.lavasoftusa.com/software/adaware/

Download the latest updates and run the scanner.

3. Some porn websites redirects links to their websites using your HOSTS file. Do a search for the HOSTS (without extension) file and remove the entry.

4. If still no joy, download HijackThis from Spywareinfo download page

http://www.spywareinfo.com/downloads.php

Run the program and you will find many entries. Most are OK. Post the log. I will find the problem for you.

5. For future preventive maintenance, make sure programs cannot just download on your computer without your permission.  From the Internet Toolbar, go to Tools > Internet Options > Advanced.  Make sure "Enable Install On Demand (Internet Explorer)" and "Enable Install On Demand (Other)" are unchecked.
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 200 total points
Comment Utility
0
 
LVL 49

Expert Comment

by:sunray_2003
Comment Utility
After that repair and reinstall IE

Repair IE :
-----------

Start > Run rundll32 setupwbv.dll,IE6Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g

or

Start > Run rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 C:\windows\inf\ie.inf

Reinstall IE:
-------------

Description of the Internet Explorer Repair Tool
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q194/1/77.asp&NoWebContent=1

How to Reinstall or Repair Internet Explorer and Outlook Express in Windows XP
http://support.microsoft.com/?kbid=318378

or

Repair Internet Explorer 6
http://www.theeldergeek.com/repair_ie6.htm

How to Uninstall Internet Explorer 6
http://support.microsoft.com/?kbid=293907


Sunray
0
 
LVL 49

Expert Comment

by:sunray_2003
Comment Utility
If nothing works , eradicate IE and download and install from scratch

IE Eradicators:
---------------

http://www.litepc.com/ieradicator.html

http://www.webattack.com/get/ieradicator.shtml

Downloads:
----------

IE Download (From 2.0 to 6.0) and Service Packs/Patches
http://helpdesk.uvic.ca/how-to/support/win95/msiexpl.html

IE Download (From 1.0 to 6.0) and service Packs
http://browsers.evolt.org/?ie/32bit

http://www.webzila.com/downloads/downloadscript/pafiledb.php?action=category&id=2

Sunray
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 97

Expert Comment

by:war1
Comment Utility
ArmchairHistorian,
    We have not heard from you? Did any comment help you solve your problem? Do you have any more questions? If an Expert help you, please accept his/her answer with an excellent or good grade.

Thanks, war1
0
 

Author Comment

by:ArmchairHistorian
Comment Utility
Sorry for taking so long to respond.  I appreciate all of your feedback.  I was hoping somebody would say, "ah ha! That's virus/trojan horse/script xyz, and here's how to eradicate it.

I tried many of the programs on Sunray's list -- none of them found this problem.  I also tried to uninstall IE, but it's not on the uninstall list.  So, I'm going to reinstall the operating system to see if that does the trick.

I appreciate your responses -- thank you.
0
 
LVL 6

Expert Comment

by:johndoeherty
Comment Utility
Hope this fits in here...
I'm having similar probs with IE 6 fully patched: when i enter certain data (search with google; login to freemail account) for some reason NOTHING happens?!? and i mean nothing: no errors no sep. task... this btw only on other users local account - my account seems unaffected. if i create a new user he has the problem too: browse to i.e. google, enter something, press enter or click on search and - nothing happens?? some links work, some not at all??? i've checked and re-checked all options and security settings and am totally stumped. Please Help.
It's an xp pro machine, both users have admin rights.
Thanx
0
 
LVL 97

Expert Comment

by:war1
Comment Utility
johndoeherty,
   You may get better response if you post a new question and not piggyback on an existing question.
0
 
LVL 6

Expert Comment

by:johndoeherty
Comment Utility
thnx
will do
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
Several part series to implement Internet Explorer 11 Enterprise Mode
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now