Internet Explorer Icon produces blank address

[Launcelot]

I have a user with a number of Internet Explorer (v6) icons on the desktop. When an icon is invoked, IE opens with the address window blank. However, an IP address appears in the bottom destination panel. Eventually the search times out with the usual error message. At this point, the correct URL appears in the address window. Clicking on Go then results in the correct page appearing.

I wondered if the user has visited a site that has planted something nasty on his system (the virus checker is up to date).

Has anyone seen anything similar?

Geoff

 

[mapleleaf]

Launcelot,

This is very common these days (see thread616-580979 for an example).

First build yourself a CD with the following as a minimum:-

http://www.cexx.org/lspfix.htm

Download LspFix

http://www.spywareinfo.com/~merijn/index.html

Download and expand StartUpList

http://security.kolla.de/index.php?lang=en&page=download

Download SpyBot 1.2

Next, go to the users desktop. Open "Add/Remove Pro.." and look for anything strange like "NewDotNet". If you find any, remove them

Now install SpyBot on the workstation. Reboot. Next run SpyBot. Go into Settings>Settings>Web Update. Make sure that the first two boxes are set (Search.. and Download..). Go to FileSets and make sure that all the boxes are ticked (NewDotNet may NOT be found unless you do). Now, restart and run SpyBot.

It will, I'm sure find problems. Some items will be checked. Before you remove them, scroll down the list and look for "NewDotNet" and add a tick mark. Fix selected items.

If you still have problems, run StartUpList /complete and post the results.

Ian

 

[Launcelot]

Thanks for a prompt reply, mapleleaf.

The Company I work for is very reluctant to use the kind of software you've pointed me to, so I'll probably have to try some of it 'offline' first. I'll definitely post back when I've done some investigating.

Regards

Geoff

 

[mapleleaf]

Geoff,

If you want to run "Startuplist /Complete" on the workstation and post it here, I can look at it and maybe give you some "ammo".

Ian