Re: ope5b.exe

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/05/04 

Date: Sun, 5 Dec 2004 15:26:04 -0500

Tret:

Please submit a sample of "OPE5B.EXE" to the following Virus Total web site
http://www.virustotal.com/flash/index_en.html

Your sample will be tested against several AV vendor's scanning engines.

Please report back with the EXACT results.

Dave

"Tret" <Tret@discussions.microsoft.com> wrote in message
news:4600AFAA-9D89-4695-AF3A-26CBE075A9AE@microsoft.com...
| First off i have disabled windows xp sp2 firewall and anti-virus because i
| have Norton firewall 2003 and Norton anti-virus 2003 with current updates
| installed.
|
| I was doing normal internet browsing when Norton pops up saying "High
| security risk attempting to install called ope5b" I told norton to always
| block the program and everything was fine. About 10 minutes later internet
| explorer shuts down and none of my desktop icons will work. each of the items
| on the desktop become shaded as if you set them for hidden. The only icon
| that isnt shaded when you click it is internet explorer, but when you click
| it a window pops up saying not enough quota to run program. if you click it
| again then it says cannot place shortcut here. if you click it again it will
| say something about creating a assets folder. after that, it will randomly
| select between these 3 windows that pop up. also, my start button doesnt work
| and my taskbar doesnt work.
|
| I shut down my computer and started it up again. i looked in processes and
| found ope5b.exe running on 95% of cpu and taking up 3000k memory if i end the
| process, my computer runs normally. if i leave the process running then the
| amount of memory it is using increases. when it reaches around 100mb then the
| icons stop working and become shaded and start button and taskbar stop
| working, when it reaches around 200mb then all icons disapear except internet
| explorer. when it reaches 400mb then windows shuts down.
|
| If i end the process after it reaches a one of those stages, then it will
| stay like that till i restart my computer. I did a full system scan with
| norton anti-virus and found 6 trojans called Trojan.ByteVerify 3 of them had
| the filenames "Counter.class" and the other 3 were called
| "VerifierBug.class". Norton quarantined and deleted the items, but it did not
| help at all. the process still runs when i start up my computer.
|
| If there is any advice you can give me on how to get rid of whatever this is
| i would be very happy. preferably a way to get rid of it without using system
| recovery