Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Spyware, viruses, & security : got Trojan.ByteVerify...

by reedhave - 1/21/06 11:40 AM
advertisement
Post 31 of 43

For the Firewall, Try This... Go To Start> Run> Type In...

by tobeach - 1/24/06 10:32 PM In reply to: I did and error check.. by reedhave

Box there msconfig & click OK. On General Tab facing you see if bullet in ''Normal Start-up''. If not & you don't know why then change to that by ticking so bullet there.
On Services tab there: At bottom click ''enable all''.
There several items in Services Tab (example: encrypt)not obviously connected to firewall) that have to be running for firewall to work.
On start-up tab check to see if AIM is a separate item box from AOL. If so, UN-check it. Start up Tab is mostly 3rd party items (Anti-Virus, Media players,etc.) Uncheck anything you don't recognize or know for fact is safe. NAV is safe !!
Question: Are we talking about Nortons firewall or ??
Re-start computer and see if firewall enabled. If you can access your Security Center in Control panel, L. click on Windows Firewall check under firewall rules (Exceptions) if anything has permission to call in/out that shouldn't (Nig**32. exe?). Remove permissions by unchecking anything you didn't put in there. If AIM has box, uncheck. If only AOL general box, can you get on net without it? If so uncheck as a test .You can recheck later if found safe.
Having little idea about network connections in general and yours in particular, I can't make any suggestion other than to see if you can now delete that extra gateway. Good Luck! :-)

Post 32 of 43

Spryware detection entries-Windows Security

by ziraffa - 4/10/06 4:33 PM In reply to: PROGRESS UPDATE & HJT LOG by reedhave

spyware detected entires that I think may be needed but note sure:

Windows Security Center Firewall Disable Nofity
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft/Security Center/Firewall Disable Notify!=dword:0

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft\Security Center\Antivirus Disable Notify!=dword:0

Post 33 of 43

firewall problem

by Whitecougar - 1/24/06 7:43 PM In reply to: got Trojan.ByteVerify... by reedhave

I don't think the problem is from the virus, the problem is with an update from microsoft in mid december that caused problems with the dcom in windows. If you check your error log you should find errors listed relating to the com+.Seems as though some pc's had their permissions changed in windows security. There is a fix for this.

Click start, then click run, in the run box type cmd to bring up the command prompt. At that prompt type(copy and paste is easier).

echo y| cacls %windir%\registration /G everyone:R system:F administrators:F

after that excecutes, at the prompt type

echo y| cacls %windir%\registration\*.clb /G everyone:R system:F administrators:F

Make sure both are typed exactly as they are here, including spaces or lack of spaces.Restart you pc and you should be fine. You may have to reenable your firewall. As far as the webpage goes you probably have been highjacked..

Post 34 of 43

Still nothing....

by reedhave - 1/25/06 11:07 AM In reply to: got Trojan.ByteVerify... by reedhave

...I went to msconfig and disabled the Firewall Sharing/ICS from running. I also did the thing through the cmd prompt and the firewall still is controlled by group policy and the internet Gateway is not goign away.

Someone mention that then needed to know my network connections. I usually connect with a USB wireless adapter to my desktop to my D-Link Router. The internet gateway is only created when I connect this way (DSL) and not though dial up (same ISP for both). There should not be an internet gateway when I connect wirelessly, ecause there has not ever been. I think it is also created when I connect wired through powerline networking.

I am not an AOL member, I jsut have their Instant Messanging service. I have never had this start up wth the computer, ever since I have had the comptuer. Also, I took care of the nigga32.exe and nigga1.exe and the problem with IE starting to that website.

Should I just back up things and reinstall SP2 like I have done in the past? Also, how would I find an error log for the disk error check that I ran? nothign was on the screen when I came back.

-Corey

Post 35 of 43

(NT) Event Viewer.. rt click on My Computer icon> "Manage"

by Carol~ Moderator - 1/25/06 1:07 PM In reply to: Still nothing.... by reedhave

Post 36 of 43

Re: Error Check Log & Possible Firewall Situation.....

by tobeach - 1/26/06 12:02 AM In reply to: got Trojan.ByteVerify... by reedhave

to find the error check log, get to event viewer, click "Applications" (they're sorted by date&time) and look for an entry: "Win Log on" event # 1001.

The following link is from another post (to Norton ) which you can ignore EXCEPT: 90% of the way to the bottom of the page are instructions re re-enabling windows firewall & ICS (sharing Internet). See:
to re-enable shared access(XP)
Win XP SP2 (firewall).
http://norton.com/avcenter/venc/data/w32.sygyp.a@mm.html

Worth a try ?? Good Luck ! :-)

Post 37 of 43

I Don't want to enable the firewall sharing though right?..

by reedhave - 1/26/06 2:01 PM In reply to: Re: Error Check Log & Possible Firewall Situation..... by tobeach

..I disabled firewall sharing/ICS from starting up when windows starts...I will try it though.

-Corey

Post 38 of 43

(NT) It Didn't Change Anything

by reedhave - 1/26/06 2:04 PM In reply to: I Don't want to enable the firewall sharing though right?.. by reedhave

Post 39 of 43

(NT) Should I jsut reinstall SP2?

by reedhave - 1/26/06 2:11 PM In reply to: (NT) It Didn't Change Anything by reedhave

Post 40 of 43

When You Did Error Check, All System Files Were Reverted..

by tobeach - 1/26/06 10:16 PM In reply to: (NT) Should I jsut reinstall SP2? by reedhave

back to exactly what was on your SP2 disk (other than additional patches/hotfixes which should have been retained). Effectively you did re-install SP2. When you installed SP2, it set itself as the standard for error check to compare with and match if discrepancies found.
Before SP2, it would have used back-up copy of OS install disk auto created w/install of XP.
You're right, if you have ZA, you don't want XP Firewall operating on same machine.
I may be in error, but I thought you had a problem with other machines you have not being able to share your net connection. Hence ICS. My impression was ICS & Firewall were required for firewall to function. I mentioned before that 6 or more apparently un-connected things ALL had to be operating for Win F.W. to work (Group Policy?).
Good to here that ZA cut off the new net connection. If you look at permissions (exceptions in XP firewall and compare to ones in ZA, your previous problem may appear as something listed in XP but not in ZA. :-)

Post 41 of 43

I Just installed Zone Alarm..

by reedhave - 1/26/06 4:08 PM In reply to: got Trojan.ByteVerify... by reedhave

...I pervented a program from starting up called "mstlsapi32" too. An internet gateway is no longer created, and Windows Firewall is still controlled by Group policy. I know that with zone alarm I dont need to controll the Windows Friewall, but I want controll of it again.

-Corey

Post 42 of 43

ZA wil not work with my network..

by reedhave - 1/27/06 8:04 PM In reply to: I Just installed Zone Alarm.. by reedhave

..it will not let other comtpuers on my network access this one even though their IP address are unblocked. I had a problem with this on a 98 machine as well a whiloe ago. This is why I want my windows firewall to be controlled by me again.

I do not need ICS for other comtpuers to access the internet. It all goes through my wireless router.

Thanks :)
Corey

Post 43 of 43

The Long Way Home

by thevmax - 1/30/06 3:19 PM In reply to: ZA wil not work with my network.. by reedhave

After reading most of your problems and the responses given, my suggestion is to re-install Windows XP, remembering to acquire all security updates and SP2.

Something else to think about... a number of users, including myself, backup any acquired software by putting it in a folder like "My Downloads" and then burning the folder to a CD periodically. This makes re-installation of your other software fairly simple.

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software