Malware/Spyware? [Solved]

It's OK to delete Trend Micro and ComboFix.

For JavaRa:

• right click on the downloaded file, click Extract All then click on Extract
• once the files have extracted, go into the folder and double click on JavaRa.exe
• from the drop down menu, please select your first language and click on Select
• when JavaRa opens, click on Remove Older Versions then click on Yes
• when that finishes, click on Search For Updates
• when prompted, select Update Using jucheck.exe
• when it finishes updating, reboot your computer

Hope this is helpful

Satchfan

In the Search for Updates boc of JavaRa, there are two choices. "Update using jucheck.exe". (Requires a newer version of the JRE installed). 2nd choice: "Update using Sun Java's Website." (If you are unsure, select this one.) I know you said to use "Update using jucheck.exe", but I was wondering what the difference is. Also, will a new version of the JRE be installed? It states a new version is required.

Use "Update using jucheck.exe" because it checks for the latest update for your machine.

If you choose to use their website, you will have to choose the version yourself.

See Java’s definition of jucheck.exe here:

http://www.java.com/en/download/faq/jucheck.xml

I'm lost. Your instructions say after extracting the JavaRa files, go into the folder and double click Java.exe. Where is the folder? Is it the desktop icon for JavaRa? I clicked that, but don't see JavaRa.exe. And I can't find a dropdown menu to select a language. When I click the desktop icon, it goes to a page with several language files (see my previous post). There is no english language file. There are language file labeled: Deutsch.lng; Espanol.lng; Francais.lng; Italiano.lng; Nederlands.lng; and Suomi.lng. If I right click the desktop icon and click Extract All, a box comes up saying the file already exists and asks if I want ot replace it. At one point a couple days ago i did get where I was asked if i wanted to update using jucheck.exe, but I can't find that again. I deleted JavaRa from the desktop and started over, but I'm still stuck.

OK let’s try to find JavaRa.exe

• click on Start > Search > For Files and Folders.
• expand “Search Options”, check Advanced Options, check Search system folders, Search hidden files and folders, and Search Subfolders.
• paste this into the Search for files and folders named box:
  

  JavaRa.exe

• when you locate it, follow the previous instructions.

Did as you said, Start>Search>For Files and Folders, but once on that page couldn't find "Search Options". Where is that located? The only place with the word "options" mentioned is under the Tools dropdown menu, where "Folder Options" is listed.

I don't know why you are having a prblem locating JavaRa when you previously found it..

You said that you ran it and got confused at this:

In the Search for Updates boc of JavaRa, there are two choices. "Update using jucheck.exe". (Requires a newer version of the JRE installed).

2nd choice: "Update using Sun Java's Website." (If you are unsure, select this one.)

Please clarify why you are having a new problem as I am a bit lost myself now.

Satchfan

It was getting confusing, so started over. I deleted the JavaRa desktop icons, then used your link to download it again. This brought up a "File Download" box with three choices, "Open", "Save", or "Cancel". I clicked "Save" and saved it to the desktop. This put a JavaRa icon on the desktop. Then I right clicked the JavaRa icon and chose "Extract All'. When that was done, another desktop icon appeared. I opened that and that went to a "Documents and Settings". The files listed there are: "Deutsch.lng; Francais.lng; Nederlands.lng; Espanol.lng; Italiano.lng; Suomi.lng; JavaRa (a long list of HKEY files); and JavaRa: The JavaRa Products Team: Paul McClain and Fred de Vries. File version 1.16.1.1763. Date created: 12/27/2010 7:23pm. Size:391 KB". I clicked the JavaRa RaProducts Team button to open it. An "Open File Security Warning" box comes up, asking if I want to Run or Cancel. I clicked "Run" and the box containing, "Search for Updates"; Remove Older Versions"; "Additional Tasks"; and "About" comes up. When I click "Search for Updates", a box containing the choice. "update using Jucheck.exe" appears. Is this what I click? What about the "Remove Older Versions button? Do I use that too, and if so do I use it before or after "Update using Jucheck.exe?

When I click "Search for Updates", a box containing the choice. "update using Jucheck.exe" appears. Is this what I click?

Yes

What about the "Remove Older Versions button? Do I use that too, and if so do I use it before or after "Update using Jucheck.exe?

Do it in this order:

• when JavaRa opens, click on Remove Older Versions then click on Yes
• when that finishes, click on Search For Updates
• when prompted, select Update Using jucheck.exe
• when it finishes updating, reboot your computer

I thought I had it. I clicked Remove Older Versions". When that was done this message came up: "Finished searching for all old versions of the JRE that were found on this system. A logfile has been created on your system. It is called JavaRa.log, and can be found in your main hard drive folder (c: for example). JavaRa will now open this file." The file, saved to Notepad, is a long list of removed items. I went to Add/Remove of the Control Panel and found Java Auto Update, Java™ 6 Update 20, and Java™ SE Runtime Environment 6 still listed. If they have been removed from the computer, why sre they still listed in Add/Remove? Then I went back and clicked "Update Using jucheck.exe. Nothing happens. I let it sit for 5 minutes, but nothing happened. The Update box just sat there.

Run MiniToolBox

Please download MiniToolBox, save it to your desktop and run it.

Place a checkmark in the following checkbox:

• List Installed Programs

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Satchfan

MiniToolBox by Farbar Version: 18-01-2012 Ran by [removed] (administrator) on 22-05-2012 at 17:34:21 Microsoft Windows XP Professional Service Pack 3 (X86) Boot Mode: Normal *************************************************************************** =========================== Installed Programs ============================ Acrobat.com (Version: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 2.6.0.19140) Adobe Flash Player 10 ActiveX (Version: 10.3.183.7) Adobe Reader X (10.1.1) (Version: 10.1.1) Advanced SystemCare 3 (Version: 3.7.2) ALi USB2.0 Driver AVG 8.5 Belarc Advisor 8.1 Critical Update for Windows Media Player 11 (KB959772) HP Image Zone Express (Version: 1.5.1.29) James Agent (Version: 1.00.0000) Java™ 6 Update 20 (Version: 6.0.200) Java™ SE Runtime Environment 6 (Version: 1.6.0.0) LSI PCI Soft Modem (Version: 2.2.98) Malwarebytes Anti-Malware version 1.61.0.1400 (Version: 1.61.0.1400) Microsoft Application Error Reporting (Version: 12.0.6012.5000) Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1) Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office XP Professional (Version: 10.0.6626.0) Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0) Santa2K (Version: 1.00.0000) Update for Windows Internet Explorer 8 (KB975364) (Version: 1) Update for Windows Internet Explorer 8 (KB976662) (Version: 1) Update for Windows XP (KB2141007) (Version: 1) Update for Windows XP (KB2345886) (Version: 1) Update for Windows XP (KB2467659) (Version: 1) Update for Windows XP (KB2541763) (Version: 1) Update for Windows XP (KB2607712) (Version: 1) Update for Windows XP (KB2616676) (Version: 1) Update for Windows XP (KB2641690) (Version: 1) Update for Windows XP (KB951978) (Version: 1) Update for Windows XP (KB955759) (Version: 1) Update for Windows XP (KB955839) (Version: 1) Update for Windows XP (KB967715) (Version: 1) Update for Windows XP (KB968389) (Version: 1) Update for Windows XP (KB971029) (Version: 1) Update for Windows XP (KB971737) (Version: 1) Update for Windows XP (KB973687) (Version: 1) Update for Windows XP (KB973815) (Version: 1) Update for Windows XP (KB976749) (Version: 1) USB-Ethernet Adapter Device VIA Networking Technologies USB Wireless LAN Adapter WebFldrs XP (Version: 9.50.5318) Windows Genuine Advantage Notifications (KB905474) (Version: 1.9.0040.0) Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2) Windows Internet Explorer 8 (Version: 20090308.140743) Windows Media Format 11 runtime Windows XP Service Pack 3 (Version: 20080414.031525) **** End of log ****

Hi jwr

According to that log, these are still installed:

Java™ 6 Update 20 (Version: 6.0.200)
Java™ SE Runtime Environment 6 (Version: 1.6.0.0)

You need to uninstall them:

To remove them:

• click on Start, Settings, Control Panel
• double-click Add or Remove Programs (it may take time for the list to appear, so be patient)
• scroll down the list and look for the above entries:
• iclick on the program names obe at a time and then on Remove.

Let me know when you’ve done that.

Satchfan

Went to Add/Remove. highlighted Java™ 6 Update 20 and when the progress line got almost all the way across, it stopped and a box popped up saying, "Internal Error 2753.regutils.dll I clicked OK and another box came up saying, "Fatal error during installation." I don't understand that because I was trying to remove it, not install it. Clicked "OK" on that box and went back to Add/Remove.

Try Windows Installer CleanUp Utility to see if that sorts out the problem.

You can download it here

Satchfan