Solved

hitting enter key brings up windows\desktop folder

Posted on 2006-07-12
12
250 Views
Last Modified: 2013-12-11
whenever i hit the enter key the windows\desktop folder pops up.   if  shift/enter or ctrl/enter then enter works as normal.   enter key works at original login screen after password but then no longer works.   have turned off all programs in startup and run in diagnostic startup mode. same results.   scanned for virus and spyware - cleaned all that were found.   seems to be virus or spyware but cannot find any.
0
Comment
Question by:deroth
  • 6
  • 4
12 Comments
 
LVL 27

Expert Comment

by:Jonvee
ID: 17091483
How many virus and Malware scanners did you use?
You could try at least two of these four, free virus scanners, as no one scanner can guarantee finding & fixing everything.  The AVG (grisoft) is particularly good:
http://www.grisoft.com/us/us_dwnl_free.php
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
http://housecall.trendmicro.com
http://www.avast.com/i_kat_207.php?lang=ENG

Then try running Adaware, Spybot, and a-squared Free, unless you've already run them?
First check for New updates then download them before scanning:
Ad-Aware SE Personal v1.06: http://www.majorgeeks.com/Ad-Aware_SE_Personal_d506.html
Spybot-Search & Destroy 1.4: http://www.majorgeeks.com/SpyBot-Search_&_Destroy_d2471.html
a-squared Free: http://www.emsisoft.com/en/software/free/
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 17091583
If you still have the problem after following the suggestion above, suggest you download, install and run HijackThis ( v1.99.0 ).  Some instructions are included:
http://www.majorgeeks.com/download3155.html

Important:  You should create a folder where you would like the HijackThis file to reside, and run it from there, not from the Desktop or a temp folder. It is important that you download this file to its *own* folder because this folder will be used when HijackThis makes "backups". Temp folders get deleted, taking with them HJT's 'backups' of items that were 'fixed'.

Run Hijackthis scan, save the log file, then copy and paste the logfile to the site below and select 'analyze'. [ Please don't "fix" anything you find unless you've run this tool before .. we can advise what to fix]
http://www.hijackthis.de/

Wait a minute or so for the analysis, then scroll to the bottom of that page and you'll see "save analysis". Click it, and the address we are after is in your top Address bar. If you've used HijackThis before you'll know what to fix, but if you wish us to advise, copy and post that address here, and not the log as it's too lengthy.  Tks.
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 17091752
As a matter of interest have you tried a registry restore??
Start > Run > type 'scanreg /restore' without the quotes, noting the space between g and /    
Select 'OK'
You'll usually see five backup registry copies, each should be marked 'Started'.
Choose a fairly recent one (preferably the most recent), which has 'Started' written against it, as long as it's BEFORE the date of your Enter key problem.

If the problem occurred more than ~ 5 days ago, you could try a 'System Restore'.
0
 

Author Comment

by:deroth
ID: 17092624
I had run Webroot - spysweeper, Adaware and tried to run Spybot but it will not run for some reason on this PC.  Tells me I need to run an update first which when I run it says it has run successfully.   Also ran AVG and Norton Antivirus for virus check.   Also had run Hijack this and did not find anything that looked unusual to me.  
I will run the trendmicro and panda as I have not run those two yet.  thanks
0
 

Author Comment

by:deroth
ID: 17092637
forgot to mention I had also run the system restore.  Too many days had passed to run the registry restore so went back two weeks prior to problem on system restore but it also did not help.
0
Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

 
LVL 27

Expert Comment

by:Jonvee
ID: 17093044
Ok, thanks.  Recommend that you *first* disable any Norton scanner that you may have running.  
Was there anything that first made you suspect a possible virus or Malware issue?

>had run Hijack this <    
Did you get the log analysed as described above, at an official site?

>scanned for virus and spyware - cleaned all that were found<    
Presume that you did *not* find any virus?

>Spybot but it will not run for some reason<
It may be a good idea to run the 'Stinger' which is a utility that cleans the system of viruses, that block anti virus software. Suggest you download the 'Stinger' and run it to make sure that 'disabling viruses' are not present.  Please note that the
filename has been changed from "stinger.exe" to "s-t-i-n-g-e-r.exe" (and more recently stng260.exe), download with details here:

http://vil.nai.com/vil/stinger/
0
 

Author Comment

by:deroth
ID: 17096608
>anything that first made you suspect a possible virus or Malware issue?
I am a PC tech (10 years) and always run virus scans and spyware checks to make sure that is not what is causing any flaky problem.    
On occasion at the very beginning after startup the first time I hit enter I get a message      unable to run command, the folder " has been removed      Any enter after that brings up the desktop folder.   I suspect something is starting as a process that is giving that error.  I am trying to figure out what the   "  might be.

When I ran the pandasoftware virus check it found 3 viruses in 3 mails in the inbox and deleted all of them.  These were new that AVG or Norton had not found.   Deleting them did not make a difference.  

>Did you get the log analysed as described above, at an official site?
No I didn't.  I just used my past years of experience and knowing basically what should and should not be there.   I certainly can send it in but haven't.

I will try the Stinger and let you know results from that.
thanks.
0
 

Author Comment

by:deroth
ID: 17096972
Solved the problem.  It was not a virus or a spyware.
Did run Stinger but showed no viruses on system.
Finally found an entry in Windows\start menu\programs\disabled startup items called
exif launcher
This icon had a short cut key of   enter    and had a target of  windows\desktop so every time enter was hit the folder opened even though it was not in the msconfig startup or any other startup.
Despite the fact it says you cannot use enter as a short cut key it obviously allowed it to be entered.
Thank you for your determined assistance.
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 17097445
Good call, and an interesting issue!  Thanks for the report.
Well, as you have answered the question yourself, you may wish to retrieve your points.
Any problems you can post back on this thread.

You could check this link under the heading "Closing Questions":
http://www.experts-exchange.com/help.jsp#hi70
Then, ask for a refund posting a 0 points question here:
http://www.experts-exchange.com/Community_Support/

Glad to help, & thanks.
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 17118213
Netminder

Agreed, "Recommendation: PAQ/refund".    Thanks.
0
 
LVL 5

Accepted Solution

by:
Netminder earned 0 total points
ID: 17125819
Closed, 125 points refunded.
Netminder
Site Admin
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now