File Menu activates unknown internet data exchange

[Guest]

A problem has started recently when I connect to the internet with IE6 (version 6.0.2800.1106IS) with update versions SP1. Q832894, and q313829. The first time I go to use the File Menu during an online session by clicking on it there is a delay of up to a minute before the menu drops down. I can see from my status monitor that data is being exchanged between my computer and somewhere else during this delay. After the first time it no longer does this, and it does not do it when I am Working Offline, even if I am connected to the internet. No strange URLs show up in the History panel either. This has not happened prior to recently so I believe something is wrong. Aside from the fact that it is annoying I am afraid it might be some virus or worm that is exchanging private data. I have kept my computer up to date with security patches and virus updates in Norton Antivirus 2003. Has anyone heard of or experienced this? What is the problem

My system is Windows 98se.

 

[Mike Burgess]

D'Arcy,
The first thing to do is to scan your system for the possibility of
unknown\unwanted spyware or parasites that may be causing your problem(s).

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-18-04]
Please post replies to this Newsgroup, email address is invalid
--

A problem has started recently when I connect to the internet with IE6

(version 6.0.2800.1106IS) with update versions SP1. Q832894, and q313829.
The first time I go to use the File Menu during an online session by
clicking on it there is a delay of up to a minute before the menu drops
down. I can see from my status monitor that data is being exchanged between
my computer and somewhere else during this delay. After the first time it no
longer does this, and it does not do it when I am Working Offline, even if I
am connected to the internet. No strange URLs show up in the History panel
either. This has not happened prior to recently so I believe something is
wrong. Aside from the fact that it is annoying I am afraid it might be some
virus or worm that is exchanging private data. I have kept my computer up to
date with security patches and virus updates in Norton Antivirus 2003. Has
anyone heard of or experienced this? What is the problem?

 

[H Leboeuf]

A long shut, do you have AdShield installed?
Is so make sure that you do not Cache Unlisted page...

The same thing was happening to me yesterday, some how I had set that option
and every time I would click something while connected my Firewall was
indicating some traffic that I could not find.


This might help others.

A problem has started recently when I connect to the internet with IE6

(version 6.0.2800.1106IS) with update versions SP1. Q832894, and q313829.
The first time I go to use the File Menu during an online session by
clicking on it there is a delay of up to a minute before the menu drops
down. I can see from my status monitor that data is being exchanged between
my computer and somewhere else during this delay. After the first time it no
longer does this, and it does not do it when I am Working Offline, even if I
am connected to the internet. No strange URLs show up in the History panel
either. This has not happened prior to recently so I believe something is
wrong. Aside from the fact that it is annoying I am afraid it might be some
virus or worm that is exchanging private data. I have kept my computer up to
date with security patches and virus updates in Norton Antivirus 2003. Has
anyone heard of or experienced this? What is the problem?

 

[DArcy]

Here is what I have done to try and fix the problem:

I installed a Host file from
http://www.mvps.org/winhelp2002/hosts.htm - Blocking
Unwanted Parasites with a Hosts File.mht. I did everything
suggested on that page and appears to be working.

Then I went to http://mvps.org/winhelp2002/unwanted.htm -
Dealing with Unwanted Spyware and Parasites.mht and did
everything on that page whch included:

Changing settings to Internet Explorer in "Security"
and "Content" and "Advanced". I tested these settings and
they appear to work.

I installed SpyBot 1.2 and ran it. It found 25 items to fx
and I had the program fix them, which it did successfully.

I ran CWShredder 1.49.1 and it found and fixed a few
things.

I ran HijackThis 1.97.7 and created a log which I have yet
to submit to http://www.spywareinfo.com/forums/ for
analysis. I did look at the list and didn't see anything
suspicious , but I am no expert.

I ran RapidBlaster.exe and it did not find anything.

All of this did nothing to correct my original problem
(see first entry). As an addendum to the problem I have
discovered that when I am connected to the internet and
have Windows Explorer open; when I click on the "File"
menu it also triggers data exchange for about a minute
before it stops and the menu finally opens up. So this
problem happens both in Internet and Windows Explorer.
When I am off line Windows Explorer, much more often than
normal, asks me If want to work offline or connect before
I do anything like save a file or open the file menu for
the first time. After I click on "Work Offline" it doesn't
bother for awhile.

I do not have adshield installed.

-----Original Message-----
D'Arcy,
The first thing to do is to scan your system for the possibility of
unknown\unwanted spyware or parasites that may be causing your problem(s).

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
__________________________________________________________ __
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-18- 04]
Please post replies to this Newsgroup, email address is invalid
--

A problem has started recently when I connect to the

internet with IE6
(version 6.0.2800.1106IS) with update versions SP1. Q832894, and q313829.
The first time I go to use the File Menu during an online session by
clicking on it there is a delay of up to a minute before the menu drops
down. I can see from my status monitor that data is being exchanged between
my computer and somewhere else during this delay. After the first time it no
longer does this, and it does not do it when I am Working Offline, even if I
am connected to the internet. No strange URLs show up in the History panel
either. This has not happened prior to recently so I believe something is
wrong. Aside from the fact that it is annoying I am afraid it might be some
virus or worm that is exchanging private data. I have kept my computer up to
date with security patches and virus updates in Norton Antivirus 2003. Has
anyone heard of or experienced this? What is the problem?

My system is Windows 98se.

.

 

[Robert Aldwinckle]

The first time I go to use the File Menu during an online session by clicking

on it there is a delay of up to a minute before the menu drops down. I can
see from my status monitor that data is being exchanged between my
computer and somewhere else during this delay.

That could also be the symptom of having a proxy configured but not there.
What happens if you uncheck all proxy settings?


---

A problem has started recently when I connect to the internet with IE6 (version 6.0.2800.1106IS) with update versions SP1.

Q832894, and q313829. The first time I go to use the File Menu during an online session by clicking on it there is a delay of up to
a minute before the menu drops down. I can see from my status monitor that data is being exchanged between my computer and somewhere
else during this delay. After the first time it no longer does this, and it does not do it when I am Working Offline, even if I am
connected to the internet. No strange URLs show up in the History panel either. This has not happened prior to recently so I believe
something is wrong. Aside from the fact that it is annoying I am afraid it might be some virus or worm that is exchanging private
data. I have kept my computer up to date with security patches and virus updates in Norton Antivirus 2003. Has anyone heard of or
experienced this? What is the problem?

 

[Illinois Fritz]

Hi DArcy,

Here is what I have done to try and fix the problem:

I ran RapidBlaster.exe and it did not find anything.

May I ask why you ran RapidBlaster? It is a parasite. See this link:

http://www.wilderssecurity.net/specialinfo/rapidblaster.html

This may be part of your problem now. See for more info:

http://doxdesk.com/parasite/RapidBlaster.html This site tells you how to
get rid of it.

Run all of your Adware/spyware removal programs again to make sure it's
gone.

Hope this helps.

Fritz216

 

[D'Arcy]

Pardon my knowledge limit, but how would I check the Proxy
settings? where would they be found?

-----Original Message-----

That could also be the symptom of having a proxy configured but not there.
What happens if you uncheck all proxy settings?

internet with IE6 (version 6.0.2800.1106IS) with update
versions SP1.

Q832894, and q313829. The first time I go to use the File

Menu during an online session by clicking on it there is a
delay of up to

a minute before the menu drops down. I can see from my

status monitor that data is being exchanged between my
computer and somewhere

else during this delay. After the first time it no longer

does this, and it does not do it when I am Working
Offline, even if I am

connected to the internet. No strange URLs show up in the

History panel either. This has not happened prior to
recently so I believe

something is wrong. Aside from the fact that it is

annoying I am afraid it might be some virus or worm that
is exchanging private

data. I have kept my computer up to date with security

patches and virus updates in Norton Antivirus 2003. Has
anyone heard of or

 

[Robert Aldwinckle]

Pardon my knowledge limit, but how would I check the Proxy
settings? where would they be found?

Options, Connections tab, Settings... (3 check boxes)


---

 

[D'Arcy]

Thanks for the info. My "Use a proxy server for this
connection" is unchecked. I only have one dial up network
setting.

 

[DArcy]

I had RapidBlaster back last summer before it ever became
public knowledge. After it became public knowledge and a
solution was described I removed it manually from the
registry and everywhere else. My internet browsing
resumed normal operations with no problems until my
current problem started a few weeks ago.

I know that RapidBlaster can morph so that's why I ran
RapidBlaster.exe and another program that detects the
virus and they both came back negative - no RapidBlaster
processes running. I have done this twice yesterday with
the same results and then I ran SpyBot again and it
returned clean results.

I am still at a loss as to what's going on.

 

[Frank Saunders, MS-MVP]

Make sure a proxy is not selected for LAN Settings either. I have had that
mess up IE over a dialup connection.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/