Forum Home
Press F1
Thread ID: 20278	2002-06-02 00:42:00	Not able to access Internet Options from the Tool menu - IE5	Guest (0)	Press F1

Post ID	Timestamp	Content	User
51998	2002-06-02 00:42:00	I have a problem with not being able to access Internet Options from the Tool menu in IE5. But first some history. As is inevitable when one browses aimlessly around the 'net, I reached a site that had popup links to a porn site - which had popup links to other porn sites. One (probably more) of these sites had a GIF infected with the JS.Exception.Exploit virus that infected my PC and made changes to about 12 registry entries making the 'www.loading-lolita.com' web site the home page and default search URL etc. If these entries were deleted and the home page set back to 'blank' in Internet Options (via the Control Panel), it would all come back when the PC was rebooted. I discovered that the virus had also dropped a file named 'radFD32A.tmp' and added a StartBoot registry entry that would run regedit with the /s switch and would call the 'radFD32A.tmp' file. Regedit would use this file to patch the registry with the aforementioned URL. So, once I had deleted the StartBoot entry and 'radFD32A.tmp' file, that problem went away. Now back to my remaining problem... If I try to access Internet Options from the Tools menu in IE5, I get a dialog box that says 'This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator'. How do I fix this problem? Any help would be appreciated!	Guest (0)
51999	2002-06-02 21:43:00	I assume that you haven't removed the virus yet. That would be the first step. If you don't have a virus scanner, you can scan your machine online for free here: http://housecall.antivirus.com/ It takes ages, but your machine will be clean. Then go out & buy a good virus scanner. PC-Cillin 2002 includes a personal firewall. It's very good.	Guest (0)
52000	2002-06-02 23:06:00	Hi Peter, Thanks for that. Yes I suppose I should have mentioned that I run Norton Antivirus (with the definitions updated every week or so) and I use ZoneAlarm firewall (I also use Cookie Pal to eat the many unwanted cookies). NAV would detect the JS.Exception.Exploit virus infected file (it came via several different file types) when it was downloaded from the website to the Temporary Internet Files 'cache', and would give me the option to delete, repair etc the infected file. However, trying to delete it wouldn't work and neither would trying to repair it (the file remained infected) - infact it would usually crash Internet Explorer. The only options left after that were Stop, Continue or Exclude, and any one of those would probably allow the virus to run. I have done several scans on the PC but NAV fails to pick anything up. I'm assuming that the file has in fact been deleted - perhaps as a cleanup ooperation by the virus(?). It went to an awful lot of trouble to make sure it's payload stayed on the PC. I also noticed that the Java Runtime was also damaged, so I uninstalled them too. I also downloaded and installed a patch from Microsoft that supposedly fixes this exploit hole. Cheers.	Guest (0)
52001	2002-06-04 12:02:00	Hi Geoff, have a look at Q216583 on the MS knowledge base. It tells you how to fix the tools/internet options problem. HTH PC	Guest (0)
52002	2002-06-04 12:58:00	Thankyou Peter, That was exactly it! The problem was caused by the 'NoBrowserOptions' entry in the registry. I can only assume the entry was made by the 'virus'. I take it you have seen this before? Or are you just much better than me at searching the MS support website? :-)	Guest (0)
1