Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
My virus scanner has picked up byteverify which I can't remove.
I run ad-ware regularly, I have tried CWShredder, Spy-bot, trojan hunter and trojan remover.
They all didn't find any problem.This is what my hijack this log looks like
Logfile of HijackThis v1.97.7
Scan saved at 10:16:01 PM, on 10/02/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\WINDOWS\System32\Fmctrl.exe
C:\PROGRA~2\Grisoft\AVG7\avgcc.exe
C:\PROGRA~2\Grisoft\AVG7\avgemc.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~2\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Soulseek\slsk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~2\Grisoft\AVG7\avgwb.dat
C:\Documents and Settings\Moglin\Local Settings\Temp\HijackThis.exeO4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.exe
O4 - HKLM\..\Run: [EzAudioTray] C:\Program Files\EzAudio\EZAUDIO.exe TRAYAPP
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~2\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~2\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [THGuard] C:\Program Files\TrojanHunter 3.8\THGuard.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38026.3043865741
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A1820B04-B14C-48EA-BEF3-6AFFF118CD5B}: NameServer = 203.30.44.23,203.30.44.24

What antivirus program do you have? Did you go to the antivirus' support website to get the removal instructions? Have you tried using your antivirus program while you are in the "safe mode" to remove it? Have you deleted all your temp internet files and off line content files? Did you disable "system restore" and then restart your computer and run your antivirus scan to see if byteverify is no longer in the system? If your system is clean after turning off "system restore" and restarting, you can turn it back on. No antivirus program can clean/repair/delete files that are in "system restore", as they are protected. Take care and all the best!

From your log I guess you are using AVG. My avg has removed this problem before, so although it is simply a question that'll annoy you, have you updated your AVG recently?
Having only glanced at your log file the only out of place thing seems to be that you are missing a bit, some registry keys? If you have any sort of homepage setup, it should appear on your logfile. Have you copied the entire logfile here?

I have AVG 7.0, and it is up to date.
That is the entire log file. I don't have any kind of home page set up.
I have only noticed it affecting my computer three times (changing the home page)
I did try deleted all my offline pages and temp internet files.
I will try my system restore.
Thanks for your ideas

i have avg antivirus and i had java byteverify and java nocheat.A I got hid of them with avg but some files named dummy.class it says r bad and need replaced and when i run ad aware the virus shows up in the ad aware cach file but it wont let me clean or delete it and if i click on the cach file it disappears. all my fonts on my computer are wierd symbels but not on internet explorer, just smaller and fuzzy. what can i do?

![]() |
internet problem!!
|
keylogger maybe??
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |