What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Win-eto.com/t.swapx.cc Hijack

37 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31
Okay, I downloaded Java, but I have no Java. It won't work, which basically makes this computer useless. If I don't have Java, I can't work on web sites. I've decided to do a system recovery this weekend. :rofl: <–agony, not laughing I think I'll send my iTunes over to my D drive. Pictures I'll save to disc. I don't know what else we can do. Services.exe was back in my HJT log that I just ran. I continue to get the same error messages that I've posted in my last few posts. If you have any other suggestions before I start over, I'll gladly hear them. Thanks again!
Post #32
I'm in the process of moving files and will pull an all-nighter to perform a system recovery. My question is this: Will moving files to my D drive be safe? System recovery is C drive only, correct? That's my plan. Thanks.
Post #34
I could not copy the 262 infected files and they did not show up in the log. Hopefully that was not a waste of 2.5 hours. Basically it looked like the same thing that Panda found the other day, only 100 less files. I noticed Java and Norton files were the majority. No Action Taken on any of the files. I was prompted by AVG for several and deleted them. Originally I meant reformatting. I would like to reset to an earlier date if possible, but from what I found, it looks like December 10th is recognized as the last good. Sat Dec 11 15:43:21 2004 => ***** Scanning complete. ***** Sat Dec 11 15:43:21 2004 => Total Files Scanned: 83735 Sat Dec 11 15:43:21 2004 => Total Virus(es) Found: 262 Sat Dec 11 15:43:21 2004 => Total Disinfected Files: 0 Sat Dec 11 15:43:21 2004 => Total Files Renamed: 0 Sat Dec 11 15:43:21 2004 => Total Deleted Files: 0 Sat Dec 11 15:43:21 2004 => Total Errors: 54 Sat Dec 11 15:43:21 2004 => Time Elapsed: 02:32:35 Sat Dec 11 15:43:21 2004 => Virus Database Date: 2004/12/09 Sat Dec 11 15:43:21 2004 => Virus Database Count: 111943 Sat Dec 11 15:43:21 2004 => Scan Completed.
Post #35
If we could make some inroads into the 262 files we could avoid a reformat. I think you are so heavily infested with malware it's stopping everything from working. When the mwavscan is complete, the lower pane contains all it found, CTRL C and paste it here - let's see what we can get rid of.
Post #36
Hey Daemon, :wavey: Here's the 262 for you. Control C, I feel so dumb. I didn't even think to do that since I'm not on a Mac. :oops: Anyway… I removed Java before this scan, but I still see it in this log. Give it a go and let me know what you come up with. On a side not, after the uninstall of Java and the restart, I did not have any error messages or Windows pop-ups about missing files as I have previously. .suede. File C:\WINDOWS\stop.00009_4.exe infected by "TrojanClicker.Win32.Small.bg" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-298c2e55-5b22f91d.class infected by "Exploit.JS.ScriptSrc.a" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-56435b3b-19e16702.class infected by "Exploit.JS.ScriptSrc.a" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar.jar-24c8383a-4b98a280.zip infected by "TrojanDropper.Java.Xideo" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-16a0a4a4-361ba381.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-2a28233a-70fa7f71.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3ae82c1c-689c559a.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5ef20017-15c26083.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6ce3b82f-508e693e.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-70415cc9-19fc2f98.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arc.zip-203f7a5-1cff768c.zip infected by "TrojanDownloader.Win32.Krepper.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-69f9c07e-38eff258.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-6dc51850-795e0b45.zip infected by "TrojanDownloader.Java.Reger.a" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-763d123a-10ea5bfd.zip infected by "TrojanDownloader.Java.Reger.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archiveb1.jar-27b54230-721ebfc0.zip infected by "TrojanDownloader.Java.OpenConnection.g" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\counter.jar-22500802-695ecc93.zip infected by "Trojan.Java.StartPage.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\geostats.jar-6937fec2-58da4939.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041204-155532-861.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130020-679.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130051-386.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130940-548.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041206-094442-770.dll tagged as not-a-virus:AdvWare.BHO.Ihbo.gen. No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041208-023710-900.dll tagged as not-a-virus:AdvWare.BHO.Ihbo.gen. No Action Taken. File C:\Program Files\Internet Explorer\bhccoomv.exe infected by "TrojanDownloader.Win32.WinShow.am" Virus. Action Taken: No Action Taken. File C:\Program Files\Internet Explorer\tuyppmos.exe infected by "TrojanDownloader.Win32.WinShow.r" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\00800F93.zip infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\00FD7F64 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\01002961 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0140744F infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\014870A1.zip infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\01D57E98 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\02E7776C infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\03E50837.htm infected by "Exploit.HTML.ObjData" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\04470C28.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\046F5ACB.class infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\047012E9.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\06BC1E68 infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\07221470 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\084B3014 infected by "Trojan.Win32.Alfora" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\08584621 infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\08B9256B.zip infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\090D3E65.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\091A6657.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\097F7BE7.class infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\098225E4.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\098225E4.zip infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\09AD3679 infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\09D43F8A.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\09D76986.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\09EB6571.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0A296301 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0A4E0474.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0ABB4908 infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0C35524E.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0C4E2E19.class infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0C605974.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0C8B2E8D.zip infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0CA407E3.zip infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\0F441F7A infected by "Trojan.Java.StartPage.g" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\120C11EF.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\14344990.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1448457A.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\145B4164.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\14A35D15.zip infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\14A60712.zip infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\154C0D79.exe infected by "TrojanProxy.Win32.Chubot" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\15526172.exe infected by "TrojanProxy.Win32.Chubot" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\169F53CE infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17303F95 infected by "Trojan.Java.StartPage.g" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17A65A78 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17A90474 infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17B62C66 infected by "Trojan.Java.ClassLoader.Dummy.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17D42646 infected by "Trojan.Java.StartPage.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\17D73614.class infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\18020B03 infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\18853CB4 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\18B76402.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\19354293.class infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1A286158.zip infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1A340D7B.zip infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1A790612.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1B511A4B.class infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1B511A4B.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1B8C0E0A.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1B8F3807.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1BC16C24 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1C4F18F9.zip infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1DD90E69.zip infected by "TrojanDownloader.Java.OpenConnection.g" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1DE918E1.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1EFF3834.zip infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\1F0D2C6D infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\20C95C1B infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\21FE2E39 infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\224247BB.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\233E0EF8 infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\234238F4 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\234B36EA infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\242F5C72 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\253812D6.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\25872755 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\260D0FDD.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\262F5655.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\26320052.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\26362A4E.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\273D77B9.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\275B46D7 infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\28194318 infected by "Trojan.Win32.StartPage.ez" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\281B5390 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\28F84AB5.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\29164495.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\29CF4B2F.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2A6D7D1C.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2C57306F infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2D164483 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2D1C187C infected by "Trojan.Java.ClassLoader.Dummy.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2DC47F9B infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2DC72997 infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2DCA5394 infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2DD87B85 infected by "Trojan.Java.StartPage.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2E161941 infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2E19433E infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2F112FFF.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\2FC20B3D.zip infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\324E1D91 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\32DC2579 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\335F23C9.zip infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\34A72D92.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\34B110F6 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\34CF2566.class infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\34D5795F.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\34D8235C.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\35DB5B3C.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\36021015.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\36053A11.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\36B969F6.CHM infected by "TrojanDownloader.VBS.Psyme.v" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\37042FA3.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\370A039C.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\384B2844 infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\38785995.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3A136352 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3A4B2D15 infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3A51010E infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3B6D77C6 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3CC44B39 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3D9947F1.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3E49772E.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\3FFB0757 infected by "Trojan.Win32.Trilon.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\40F7143C.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\41522BD7.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\415A3671 infected by "Trojan.Java.ClassLoader.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\41BC2F3B.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\41BC2F3B.htm infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\422942E7 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\42813AA7.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\42C22497.class infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\42EA23CC infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\43EC20FA.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\44001CE5.zip infected by "TrojanDownloader.Java.OpenConnection.g" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\44731CD4 infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\44E2047A infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\466F3E54.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46A474BE infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46A92087 infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46AC4A83 infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46B31E7C infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46B64878 infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\46D76C54 infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\47841F8F infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4787498B infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\497C417A infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4A7637CE.zip infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4AE736CE infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4D5308DE infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4D56436A infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4DB97EE6 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\4EC4090C.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\50AE3EFF infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\50B83CF4 infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\50D536D3 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5172004A infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\52080574.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\52BD5EB5 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\53B4019D.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\544762FB.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\54752EC9.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\547E2CBE.class infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\548256BB.class infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\55737F42 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\575C7546 infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\57F15227.class infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\57F15227.htm infected by "Trojan.JS.Seeker" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\581118D0.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5A425527 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BA517A8 infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BA841A4 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BC63B84 infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BCC0F7C infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BE65F60 infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5BE9095C infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5CC15C6F infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5D4B4C24.class infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5D4F7621.class infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5DB70416.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5DE50C66.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\5F2405F6 infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\61894A23 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\61EF402B infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\62554C10 infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\626C71F7 infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\62701BF3 infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\634A1E72 infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\63D44FDF.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\63D94458.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\63F71DB7.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\64CB4125 infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\651930CF infected by "Trojan.Java.ClassLoader.Dummy.a" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\655E2284 infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\65B036E8.zip infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\67C60C38 infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\68054D4D infected by "Trojan.Java.StartPage.m" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6822472C infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\688D1397.dat infected by "I-Worm.Ronoper.t" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\695E653A.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6A066312.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6A6943F5 infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6AD1588C.zip infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6C712F08 infected by "Trojan.Java.Femad" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6CF74CBE.zip infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6D807C2A infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6DE67231 infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6EB63E4C infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6EEF0415 infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\6F8629A3 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\70791625.exe infected by "TrojanDropper.Win32.Small.ig" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\708B48F6.class infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\708E72F2.class infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\70921CEE.class infected by "Trojan.Java.ClassLoader.Dummy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\709B1AE4.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\72B51A6C.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\73325AE3.zip infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\73C90B92.zip infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\76413549.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\764C4B8B.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\76913255.zip infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\76E6643B.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\775E3ABC.chm infected by "Trojan.Win32.StartPage.au" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\77D406FB infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7B9640FA infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7BA612E8 infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7BAC668E.zip infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7BBD38CF infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7BD2448D.zip infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7BEE2E46.zip infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7C6164E8 infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7D726D9A.chm infected by "TrojanDownloader.Java.Miner" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7DB13218 infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7F9E75DA infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7FA21FD6 infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Program Files\Norton AntiVirus\Quarantine\7FC66DAF infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP664\A0301096.exe infected by "Trojan-Downloader.Win32.Small.aci" Virus. Action Taken: No Action Taken. File C:\toha.chm infected by "Trojan.Win32.Dialer.ce" Virus. Action Taken: No Action Taken. File C:\WINDOWS\stop.00009_4.exe infected by "TrojanClicker.Win32.Small.bg" Virus. Action Taken: No Action Taken.
Post #37 last edited
It's not as bad as it first seems - most are quarantined files. Probably best to print this. Could you Open Norton and see if there is a way to delete all files in quarantine first. Also leave Java off your system for now.

Next, start Killbox and click on Tools->Delete Temp Files.

When that finishes, copy and paste each of the following lines into the "Full Path of File to Delete" box in Killbox, and click the red button with the white X on it after each. Keep track of any files it tells you either could not be found or could not be deleted, as you'll need those later:

C:\Program Files\Internet Explorer\bhccoomv.exe

C:\Program Files\Internet Explorer\tuyppmos.exe

C:\toha.chm

C:\WINDOWS\stop.00009_4.exe

C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP664\A0301096.exe

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-298c2e55-5b22f91d.class

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-56435b3b-19e16702.class

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar.jar-24c8383a-4b98a280.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-16a0a4a4-361ba381.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-2a28233a-70fa7f71.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3ae82c1c-689c559a.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5ef20017-15c26083.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6ce3b82f-508e693e.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-70415cc9-19fc2f98.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arc.zip-203f7a5-1cff768c.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-69f9c07e-38eff258.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-6dc51850-795e0b45.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-763d123a-10ea5bfd.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archiveb1.jar-27b54230-721ebfc0.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\counter.jar-22500802-695ecc93.zip

C:\Documents and Settings\Phantom\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\geostats.jar-6937fec2-58da4939.zip


For the files that it either couldn't find or couldn't delete, in the killbox again this time, put a mark next to "Delete on Reboot". Copy and paste each file into the file name box, then click the red button with the X after each. It will ask you if you want to reboot each time you click it, answer NO until after you've pasted the last file name, at which time you should answer Yes.

When it reboots, please post a new HJT log and the output from the mwavscan again.
Post #38 last edited
So when I wen to start my PC today, the infamous Operating System Not Found appeared again. I inserted my recovery disc, but this time it said my hard drive was not found. I was asked to press F1 to continue or F2 to configure, so I tried F2 after no luck with F1 several times. F1 continued to bring me back to the OS Not Found screen. F2 took me to my BIOS. I didn't know what to do so backed out. I decided to go back in and went to the hard drive and set it to default settings. I don't think this did anything actually. I was back at the F1 or F2 and was so pissed I just held down F1 and my computer started back up. Ahhh, I'm loving the malware on my PC right about now. Loving it. This past week makes me want to get a Mac that much more.

I can't do a copy at all from my Norton, but here are a few of the Trojans and viruses. They are not in quarantine, but they are back up files. Nice. 263 of them.

File Name - Virus Name:
a.class
ar.jar
archive.jar
B.class
Beyond. class
BlackBox.class
buka.chm
classloader.jar
codehide.htm
Count.class
count.jar
counter.class
Counter.class
counter.htm
d.dialer2004
demo.jar
Dummy.class
exploit.chm
freemovies.jar
frodo.htm (isn't he from Lord of the Rings?)-Bloodhound.Ex…
frodo.htm-MHTMLRedir.Ex…
hny.htm-MHTMLRedir.Ex…
hny2.htm-MHTMLRedir.Ex…
installer.htm-Download.Ject
loi.exe-W32.IRCBot.Gen
main.chm-Downloader.Tr…
main.htm-MHTMLRedir.Ex…
masta.htm-Bloodhound.Ex…
mtwirl.dll
nude.jar (sounds kinky)
ohh.jar (this one, too)
olehelp.exe
Parser.class
V.class-Worker.class-Trojan-ByteVerify
VerifyBug.class (several)-Worker.class-Trojan-ByteVerify
VerufyBug.class - Hacktool
winsearchie.exe-Trojan.StartPage
wmplayer.exe-W32.IRCBot.Gen
wmplayer.exe.temp-Downloader.Tr…
Worker.class-Trojan-ByteVerify

Okay, I typed the about out by hand, so that is why it is half full, but you get the idea. I removed all 263 items.

I had no problems deleting all the file you said to with KillBox. I did the Standard File Kill on all. It said "Backup & Delete," does this mean I have a backup copy of all these files somewhere else now?

New HJT log:

Logfile of HijackThis v1.98.2
Scan saved at 10:19:13 PM, on 12/12/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\Jog Dial Navigator\JogServ2.exe
C:\Program Files\Sony\10Key Utility\va10key.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Apoint\Apntex.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5Cmozilla.org%5CMozilla%5Csearchplugins%5Cgoogle.src"); (C:\Documents and Settings\Phantom\Application Data\Mozilla\Profiles\default\7dj41z81.slt\prefs.js)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Merriam-Webster Online - {B7B76DD6-B6F0-4443-AF81-6A3ECF12A57D} - C:\WINDOWS\_MWOLTB.DLL
O3 - Toolbar: Dictionary.com - {11359F4A-B191-42D7-905A-594F8CF0387B} - C:\WINDOWS\Downloaded Program Files\lexbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [va10key] C:\Program Files\Sony\10Key Utility\va10key.exe
O4 - HKLM\..\Run: [JOGSERV2.EXE] C:\Program Files\Sony\Jog Dial Navigator\JogServ2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MWOL &Dictionary - res://C:\WINDOWS\_MWOLTB.DLL/23/219
O8 - Extra context menu item: MWOL &Thesaurus - res://C:\WINDOWS\_MWOLTB.DLL/23/220
O8 - Extra context menu item: Search &Dictionary - C:\Program files\Lexico\Toolbar\dictionary.htm
O8 - Extra context menu item: Search &Thesaurus - C:\Program files\Lexico\Toolbar\thesaurus.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0819.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0819.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=34738&clcid;=0x409
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {3CF32649-D1C0-4F42-AB44-ED284748920B} (Merriam-Webster Online Toolbar) - http://www.m-w.com/toolbar/webinstall.cab
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.ipswitch.com/_installs/wsftp_le/setup.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1102306960132
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {F0E2D69A-DC2F-4E9B-A993-684FB1C21DBC} - http://dictionary.reference.com/tools/toolbar/lexico.cab

MWAVSCAN will be posted in several hours. :weee:
Post #40
Finally finished! File C:\!Submit\A0301096.exe infected by "Trojan-Downloader.Win32.Small.aci" Virus. Action Taken: No Action Taken. File C:\!Submit\ar.jar-24c8383a-4b98a280.zip infected by "TrojanDropper.Java.Xideo" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-16a0a4a4-361ba381.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-2a28233a-70fa7f71.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-3ae82c1c-689c559a.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-5ef20017-15c26083.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-6ce3b82f-508e693e.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\ar3.jar-70415cc9-19fc2f98.zip infected by "Trojan.Java.ClassLoader.k" Virus. Action Taken: No Action Taken. File C:\!Submit\arc.zip-203f7a5-1cff768c.zip infected by "TrojanDownloader.Win32.Krepper.i" Virus. Action Taken: No Action Taken. File C:\!Submit\archive.jar-69f9c07e-38eff258.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\!Submit\archive.jar-6dc51850-795e0b45.zip infected by "TrojanDownloader.Java.Reger.a" Virus. Action Taken: No Action Taken. File C:\!Submit\archive.jar-763d123a-10ea5bfd.zip infected by "TrojanDownloader.Java.Reger.b" Virus. Action Taken: No Action Taken. File C:\!Submit\archiveb1.jar-27b54230-721ebfc0.zip infected by "TrojanDownloader.Java.OpenConnection.g" Virus. Action Taken: No Action Taken. File C:\!Submit\bhccoomv.exe infected by "TrojanDownloader.Win32.WinShow.am" Virus. Action Taken: No Action Taken. File C:\!Submit\BlackBox.class-298c2e55-5b22f91d.class infected by "Exploit.JS.ScriptSrc.a" Virus. Action Taken: No Action Taken. File C:\!Submit\BlackBox.class-56435b3b-19e16702.class infected by "Exploit.JS.ScriptSrc.a" Virus. Action Taken: No Action Taken. File C:\!Submit\counter.jar-22500802-695ecc93.zip infected by "Trojan.Java.StartPage.j" Virus. Action Taken: No Action Taken. File C:\!Submit\geostats.jar-6937fec2-58da4939.zip infected by "Trojan.Java.StartPage.o" Virus. Action Taken: No Action Taken. File C:\!Submit\stop.00009_4.exe infected by "TrojanClicker.Win32.Small.bg" Virus. Action Taken: No Action Taken. File C:\!Submit\toha.chm infected by "Trojan.Win32.Dialer.ce" Virus. Action Taken: No Action Taken. File C:\!Submit\tuyppmos.exe infected by "TrojanDownloader.Win32.WinShow.r" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041204-155532-861.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130020-679.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130051-386.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041205-130940-548.dll infected by "Trojan.Win32.Krepper.ae" Virus. Action Taken: No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041206-094442-770.dll tagged as not-a-virus:AdvWare.BHO.Ihbo.gen. No Action Taken. File C:\HijackThis\hijackthis\backups\backup-20041208-023710-900.dll tagged as not-a-virus:AdvWare.BHO.Ihbo.gen. No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303227.exe infected by "TrojanProxy.Win32.Chubot" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303228.exe infected by "TrojanDropper.Win32.Small.ig" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303229.exe infected by "TrojanProxy.Win32.Chubot" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303231.exe infected by "TrojanDownloader.Win32.WinShow.am" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303232.exe infected by "TrojanDownloader.Win32.WinShow.r" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{FB32A4D8-7A80-4204-BFD5-823A67FB9529}\RP665\A0303233.exe infected by "TrojanClicker.Win32.Small.bg" Virus. Action Taken: No Action Taken.
Post #41
Oh, is it possible that my CD drive is corrupt now? I am trying to do a final project for class, and when I inserted my CD label disc and clicked on it, a "QuickTime5" installer appeared and said I needed to update. It was obviously fake, but it wouldn't go away. I unistalled everything for that QuickTime and got the real one from the Apple site, but nothing works. Anyone want to buy me a new computer? :D
Post #42
Good. None of those are running on your system. OK do this. Using Windows Explorer, navigate to the !Submit folder on the C:\ drive and delete it. Open HJT>Config>Backups>Delete all 1. Right-click My Computer>Click Properties>Click the System Restore tab>Check the box next to 'Turn off System Restore on all drives'>Click Apply>Click OK. 2. Reboot. 3. Repeat the process but this time remove the check from the box. Post a new HJT log and let me know how it's running.
Post #43 last edited
Was I supposed to reboot after I removed the check? I didn't if I was supposed to.
One note on my restart…while my PC was shutting down, I had 2 pop-up messages. ccApp and DDE. I don't remember what they said, but those were the names I wrote down. Not very helpful, I know, but if those mean anything, I'm guessing you would know. Also, on my restart, the Phoenix BIOS screen with the F1 and F2 prompts appeared before anything again, so I held down F1 like the last time. These are the only two times I have ever seen those screens…aside from the OS Not Found a few days ago minus the BIOS screen.
I hope my PC is not on its death bed. Thanks again for all of your help and trouble.
:)

Edit: I uninstalled iTunes & QuickTime again. I reinstalled them again. I also get the same windows prompt:
"DDE Server Window: iTunes.exe - Unable To Locate Component
This application has failed to start because OLEPRO32.DLL was not found. Re-installing the application may fix this problem." To which I click OK, then I get:
"QuickTime Unavailable
Quick Time failed to initialize. Error # -2093.
Please make sure QuickTime is properly installed on this computer."
Also, should I continue to have Norton and AVG at the same time? Would I be safe for now without Norton and with the free AVG? I am going to purchase Panda Internet Securities very soon.


Logfile of HijackThis v1.98.2
Scan saved at 3:51:12 AM, on 12/13/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\Jog Dial Navigator\JogServ2.exe
C:\Program Files\Sony\10Key Utility\va10key.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5Cmozilla.org%5CMozilla%5Csearchplugins%5Cgoogle.src"); (C:\Documents and Settings\Phantom\Application Data\Mozilla\Profiles\default\7dj41z81.slt\prefs.js)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Merriam-Webster Online - {B7B76DD6-B6F0-4443-AF81-6A3ECF12A57D} - C:\WINDOWS\_MWOLTB.DLL
O3 - Toolbar: Dictionary.com - {11359F4A-B191-42D7-905A-594F8CF0387B} - C:\WINDOWS\Downloaded Program Files\lexbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [va10key] C:\Program Files\Sony\10Key Utility\va10key.exe
O4 - HKLM\..\Run: [JOGSERV2.EXE] C:\Program Files\Sony\Jog Dial Navigator\JogServ2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MWOL &Dictionary - res://C:\WINDOWS\_MWOLTB.DLL/23/219
O8 - Extra context menu item: MWOL &Thesaurus - res://C:\WINDOWS\_MWOLTB.DLL/23/220
O8 - Extra context menu item: Search &Dictionary - C:\Program files\Lexico\Toolbar\dictionary.htm
O8 - Extra context menu item: Search &Thesaurus - C:\Program files\Lexico\Toolbar\thesaurus.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0819.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0819.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=34738&clcid;=0x409
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {3CF32649-D1C0-4F42-AB44-ED284748920B} (Merriam-Webster Online Toolbar) - http://www.m-w.com/toolbar/webinstall.cab
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.ipswitch.com/_installs/wsftp_le/setup.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1102306960132
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {F0E2D69A-DC2F-4E9B-A993-684FB1C21DBC} - http://dictionary.reference.com/tools/toolbar/lexico.cab
Post #44 last edited
OK, you didn't need to reboot after removing the check.

Click Start>Run> type chkdsk >OK

Let me know if anything was fixed.

Uninstall Norton and just use AVG for now.

Go here and download the missing file:

http://www.dll-files.com/dllindex/dll-files.shtml?olepro32

Save it to C:\Windows and C:\Windows\System32

Try to install those applications again. If you have a few hours to kill, run the mwavscan to confirm you are still clean.
Post #45 last edited
When I was uninstalling Norton, my Windows screens were shut down. I had to restart my uninstall as well. The bad part is I was typing my reply with the two files that were "fixed" from my chkdsk run. There were two orphaned files. I remember one was index[2].htm, but I don't remember anything else. Sorry. :(

Norton uninstall is complete and I restarted. Will I be safe with AVG for now? I don't think it has a firewall. Well, aparently I'm fine - I'm writing this to you. :)
On my restart, the BIOS screen was once again the first thing that opened and I had to press F1. I'm getting pretty good at that now. hehe. Okay, not really funny. I'm gonna have a friend look at it and/or call Sony about it.

Unzipped OLEPRO32 to both C:\Windows and C:\Windows\System32 with no problems.

I'm going to try QuickTime, iTunes, and Java again. I will post a new mwavscan in a few hours that I do have to kill. I'll do anything to avoid working on my finals!

Edit: Reinstalled QuickTime/iTunes but still get the "DDE Server Window: iTunes.exe - Unable To Locate Component. This application has failed to start because OLEPRO32.DLL was not found. Re-installing the application may fix this problem." To which I click OK, then I get: "QuickTime Unavailable
Quick Time failed to initialize. Error # -2093. Please make sure QuickTime is properly installed on this computer."

I even tried the directions on the download site if it didn't work to go to start/run/CMD/enter and type regsvr32 olepro32.dll Maybe I did that wrong?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI