hey, i just fixed this problem on my computer !!!
i had this problem since december 24th.
the cause is indeed a virus and in my case the viruses' name was "HYBRIS". see information here:
http://www.f-secure.com/v-descs/hybris.htm
the virus infects WSOCK32.DLL in your C:\WINDOWS\SYSTEM directory. all you need to do is replace the infected wsock file with the original one.
i did this manually, but maybe the (free) antivirus program F-PROT is able to do that for you if you dont know how to do it manually. F-PROT detects the HYBRIS virus for sure. i downloaded the latest version (3.08b) today and it was able to detect it. mcafee does NOT detect that virus so far ! i have been using mcafee antivirus before but this one didnt detect the virus, not even with the latest DAT file (4113).
you can obtain F-PROT from
http://www.f-prot-antivirus.com/
this site is in german, but you can click on "English" in the upper part and it will display in english. then you need to download the following files and extract them one after another (in this order !) into a newly created directory on your harddisk:
1. fp-308b.zip
2. fp-def.zip
3. macrdef2.zip
4. sign2.zip
you will then have to run f-prot.exe in that newly created directory and you will see an msdos window with f-prot running. scan your harddisk for the HYBRIS virus...
maybe you can first change the options so f-prot scans C:\WINDOWS\SYSTEM only first, cause it will be quicker then. if you got an infected WSOCK32.DLL in that dir then you can either let f-prot try to clean it (didnt try that myself) or get the original WSOCK32.DLL from your WINDOWS CD. i will just try to explain how to do that:
1. exit windows and enter msdos mode
2. type "cd c:\windows\system" to move to the system dir
3. for the next step you need to know where the .cab files of your windows reside on your win cd. try to search the cd for .cab files and look at the directory in which a file called "precopy1.cab" is located in.
4. type "extract /a e:\win98\precopy1.cab wsock32.dll" (this assumes your cd is drive letter e: and the cab files are stored in dir e:\win98 !)
5. you will be prompted if it is ok to overwrite the old WSOCK32.DLL. you should say "yes" cause this is what we intend to do.
this is it.
in case you had an infection you should let f-prot check all your harddisk cause it is possible that HYBRIS infected other files as well (even files which reside in archives like ZIP or RAR !).
well, if you are unlucky f-prot will tell you that many files have been infected by HYBRIS. in this case you should maybe prefer to let f-prot try cleaning the mess up instead of handling it manually... i luckily had only 7 infections on my whole 60 gb harddisks, so i was quite lucky, but i had the virus for only 4 days, so i guess there are people out there with much less luck...
good luck to you all
c u