Computing.Net > Forums > Security and Virus > Byteverify detected

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Byteverify detected

Reply to Message Icon

Name: Moglin
Date: February 10, 2004 at 06:19:49 Pacific
OS: Windows XP
Comment:

My virus scanner has picked up byteverify which I can't remove.

I run ad-ware regularly, I have tried CWShredder, Spy-bot, trojan hunter and trojan remover.
They all didn't find any problem.

This is what my hijack this log looks like

Logfile of HijackThis v1.97.7
Scan saved at 10:16:01 PM, on 10/02/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\WINDOWS\System32\Fmctrl.exe
C:\PROGRA~2\Grisoft\AVG7\avgcc.exe
C:\PROGRA~2\Grisoft\AVG7\avgemc.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~2\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Soulseek\slsk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~2\Grisoft\AVG7\avgwb.dat
C:\Documents and Settings\Moglin\Local Settings\Temp\HijackThis.exe

O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.exe
O4 - HKLM\..\Run: [EzAudioTray] C:\Program Files\EzAudio\EZAUDIO.exe TRAYAPP
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~2\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~2\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [THGuard] C:\Program Files\TrojanHunter 3.8\THGuard.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38026.3043865741
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A1820B04-B14C-48EA-BEF3-6AFFF118CD5B}: NameServer = 203.30.44.23,203.30.44.24




Sponsored Link
Ads by Google

Response Number 1
Name: capt
Date: February 10, 2004 at 07:01:18 Pacific
Reply:

What antivirus program do you have? Did you go to the antivirus' support website to get the removal instructions? Have you tried using your antivirus program while you are in the "safe mode" to remove it? Have you deleted all your temp internet files and off line content files? Did you disable "system restore" and then restart your computer and run your antivirus scan to see if byteverify is no longer in the system? If your system is clean after turning off "system restore" and restarting, you can turn it back on. No antivirus program can clean/repair/delete files that are in "system restore", as they are protected. Take care and all the best!


0

Response Number 2
Name: G_B1
Date: February 10, 2004 at 12:16:13 Pacific
Reply:

From your log I guess you are using AVG. My avg has removed this problem before, so although it is simply a question that'll annoy you, have you updated your AVG recently?

Having only glanced at your log file the only out of place thing seems to be that you are missing a bit, some registry keys? If you have any sort of homepage setup, it should appear on your logfile. Have you copied the entire logfile here?


0

Response Number 3
Name: Moglin
Date: February 11, 2004 at 00:11:59 Pacific
Reply:

I have AVG 7.0, and it is up to date.

That is the entire log file. I don't have any kind of home page set up.

I have only noticed it affecting my computer three times (changing the home page)

I did try deleted all my offline pages and temp internet files.

I will try my system restore.
Thanks for your ideas


0

Response Number 4
Name: zombie31m
Date: March 5, 2004 at 14:58:18 Pacific
Reply:

i have avg antivirus and i had java byteverify and java nocheat.A I got hid of them with avg but some files named dummy.class it says r bad and need replaced and when i run ad aware the virus shows up in the ad aware cach file but it wont let me clean or delete it and if i click on the cach file it disappears. all my fonts on my computer are wierd symbels but not on internet explorer, just smaller and fuzzy. what can i do?


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


internet problem!! keylogger maybe??



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Byteverify detected

java/byteVerify virus detected!!!! www.computing.net/answers/security/javabyteverify-virus-detected/13879.html

Can't delete Exploit-ByteVerify www.computing.net/answers/security/cant-delete-exploitbyteverify/8602.html

help w/ java/byteverify www.computing.net/answers/security/help-w-javabyteverify/11315.html