Re: ope5b.exe

From: Road Runner (beepbeep_at_9y.com)
Date: 12/05/04 

Date: Sun, 5 Dec 2004 16:42:37 -0500

Hi ... Try loading the file onto this scan website and see what they find

http://virusscan.jotti.dhs.org/

"Tret" <Tret@discussions.microsoft.com> wrote in message
news:4600AFAA-9D89-4695-AF3A-26CBE075A9AE@microsoft.com...
> First off i have disabled windows xp sp2 firewall and anti-virus because i
> have Norton firewall 2003 and Norton anti-virus 2003 with current updates
> installed.
>
> I was doing normal internet browsing when Norton pops up saying "High
> security risk attempting to install called ope5b" I told norton to always
> block the program and everything was fine. About 10 minutes later internet
> explorer shuts down and none of my desktop icons will work. each of the
> items
> on the desktop become shaded as if you set them for hidden. The only icon
> that isnt shaded when you click it is internet explorer, but when you
> click
> it a window pops up saying not enough quota to run program. if you click
> it
> again then it says cannot place shortcut here. if you click it again it
> will
> say something about creating a assets folder. after that, it will randomly
> select between these 3 windows that pop up. also, my start button doesnt
> work
> and my taskbar doesnt work.
>
> I shut down my computer and started it up again. i looked in processes and
> found ope5b.exe running on 95% of cpu and taking up 3000k memory if i end
> the
> process, my computer runs normally. if i leave the process running then
> the
> amount of memory it is using increases. when it reaches around 100mb then
> the
> icons stop working and become shaded and start button and taskbar stop
> working, when it reaches around 200mb then all icons disapear except
> internet
> explorer. when it reaches 400mb then windows shuts down.
>
> If i end the process after it reaches a one of those stages, then it will
> stay like that till i restart my computer. I did a full system scan with
> norton anti-virus and found 6 trojans called Trojan.ByteVerify 3 of them
> had
> the filenames "Counter.class" and the other 3 were called
> "VerifierBug.class". Norton quarantined and deleted the items, but it did
> not
> help at all. the process still runs when i start up my computer.
>
> If there is any advice you can give me on how to get rid of whatever this
> is
> i would be very happy. preferably a way to get rid of it without using
> system
> recovery