ope5b.exe

From: Tret (Tret_at_discussions.microsoft.com)
Date: 12/05/04 

Date: Sun, 5 Dec 2004 11:09:03 -0800

First off i have disabled windows xp sp2 firewall and anti-virus because i
have Norton firewall 2003 and Norton anti-virus 2003 with current updates
installed.

I was doing normal internet browsing when Norton pops up saying "High
security risk attempting to install called ope5b" I told norton to always
block the program and everything was fine. About 10 minutes later internet
explorer shuts down and none of my desktop icons will work. each of the items
on the desktop become shaded as if you set them for hidden. The only icon
that isnt shaded when you click it is internet explorer, but when you click
it a window pops up saying not enough quota to run program. if you click it
again then it says cannot place shortcut here. if you click it again it will
say something about creating a assets folder. after that, it will randomly
select between these 3 windows that pop up. also, my start button doesnt work
and my taskbar doesnt work.

I shut down my computer and started it up again. i looked in processes and
found ope5b.exe running on 95% of cpu and taking up 3000k memory if i end the
process, my computer runs normally. if i leave the process running then the
amount of memory it is using increases. when it reaches around 100mb then the
icons stop working and become shaded and start button and taskbar stop
working, when it reaches around 200mb then all icons disapear except internet
explorer. when it reaches 400mb then windows shuts down.

If i end the process after it reaches a one of those stages, then it will
stay like that till i restart my computer. I did a full system scan with
norton anti-virus and found 6 trojans called Trojan.ByteVerify 3 of them had
the filenames "Counter.class" and the other 3 were called
"VerifierBug.class". Norton quarantined and deleted the items, but it did not
help at all. the process still runs when i start up my computer.

If there is any advice you can give me on how to get rid of whatever this is
i would be very happy. preferably a way to get rid of it without using system
recovery