PCTech Forums

i found that i have the exploit trojan "byte-verify" on my comp, but since im not running microsoft vm, does it compromise my system in any way?

I have read that your anti-virus can say you have it.. even if it's not affecting you.... like it 'could have' affected you. I have read that if you have all windows updates you should be safe. I have had the same problem.

Have you gotten rid of it with an anti-virus program ?

lilpink x

its "non-cleanable" so i'd hafta delete the files (i don't want to screw up java)

I can't remember what happened when I had it... only that i googled it like crazy... but like you say... your AV told you that it's not compromising your machine.. maybe it's just warning you that it could have done if patches weren't in place... you have been in contact with it but it hasnt done you any harm I think.

lilpink x

If you have a trojan I would get rid of it, no matter whether it's currently an issue or not.

this showed up on the desktop:


An unexpected exception has been detected in native code outside the VM.
Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0x7D2545F
Function=Java_sun_awt_windows_WColor_getDefaultColor+0x2E0B
Library=C:\Program Files\Java\j2re1.4.2_05\bin\awt.dll

Current Java thread:
at sun.awt.windows.WToolkit.eventLoop(Native Method)
at sun.awt.windows.WToolkit.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

Dynamic libraries:
0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
0x7C900000 - 0x7C9B0000 C:\WINDOWS\system32\ntdll.dll
0x7C800000 - 0x7C8F4000 C:\WINDOWS\system32\kernel32.dll
0x77C10000 - 0x77C68000 C:\WINDOWS\system32\msvcrt.dll
0x77D40000 - 0x77DD0000 C:\WINDOWS\system32\USER32.dll
0x77F10000 - 0x77F56000 C:\WINDOWS\system32\GDI32.dll
0x77F60000 - 0x77FD6000 C:\WINDOWS\system32\SHLWAPI.dll
0x77DD0000 - 0x77E6B000 C:\WINDOWS\system32\ADVAPI32.dll
0x77E70000 - 0x77F01000 C:\WINDOWS\system32\RPCRT4.dll
0x77760000 - 0x778CC000 C:\WINDOWS\system32\SHDOCVW.dll
0x77A80000 - 0x77B14000 C:\WINDOWS\system32\CRYPT32.dll
0x77B20000 - 0x77B32000 C:\WINDOWS\system32\MSASN1.dll
0x754D0000 - 0x75550000 C:\WINDOWS\system32\CRYPTUI.dll
0x76C30000 - 0x76C5E000 C:\WINDOWS\system32\WINTRUST.dll
0x76C90000 - 0x76CB8000 C:\WINDOWS\system32\IMAGEHLP.dll
0x77120000 - 0x771AC000 C:\WINDOWS\system32\OLEAUT32.dll
0x774E0000 - 0x7761C000 C:\WINDOWS\system32\ole32.dll
0x5B860000 - 0x5B8B4000 C:\WINDOWS\system32\NETAPI32.dll
0x771B0000 - 0x77256000 C:\WINDOWS\system32\WININET.dll
0x76F60000 - 0x76F8C000 C:\WINDOWS\system32\WLDAP32.dll
0x77C00000 - 0x77C08000 C:\WINDOWS\system32\VERSION.dll
0x773D0000 - 0x774D2000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
0x7C9C0000 - 0x7D1D4000 C:\WINDOWS\system32\SHELL32.dll
0x5D090000 - 0x5D127000 C:\WINDOWS\system32\comctl32.dll
0x5AD70000 - 0x5ADA8000 C:\WINDOWS\system32\uxtheme.dll
0x10000000 - 0x10006000 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IadHide4.dll
0x75F80000 - 0x7607C000 C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20012000 C:\WINDOWS\system32\browselc.dll
0x77B40000 - 0x77B62000 C:\WINDOWS\system32\appHelp.dll
0x76FD0000 - 0x7704F000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 - 0x77115000 C:\WINDOWS\system32\COMRes.dll
0x77260000 - 0x772FE000 C:\WINDOWS\system32\urlmon.dll
0x77FE0000 - 0x77FF1000 C:\WINDOWS\system32\Secur32.dll
0x77A20000 - 0x77A74000 C:\WINDOWS\System32\cscui.dll
0x76600000 - 0x7661D000 C:\WINDOWS\System32\CSCDLL.dll
0x77920000 - 0x77A13000 C:\WINDOWS\system32\SETUPAPI.dll
0x00F80000 - 0x00F9A000 c:\program files\hp\digital imaging\bin\hpdtlk02.dll
0x73DD0000 - 0x73ECE000 C:\WINDOWS\system32\MFC42.DLL
0x76080000 - 0x760E5000 C:\WINDOWS\system32\MSVCP60.dll
0x00FC0000 - 0x00FCC000 C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
0x00FE0000 - 0x0109B000 C:\PROGRA~1\SPYBOT~1\SDHelper.dll
0x5EDD0000 - 0x5EDE7000 C:\WINDOWS\system32\olepro32.dll
0x75E90000 - 0x75F40000 C:\WINDOWS\system32\SXS.DLL
0x011D0000 - 0x01258000 C:\WINDOWS\system32\shdoclc.dll
0x01260000 - 0x01525000 C:\WINDOWS\system32\xpsp2res.dll
0x75CF0000 - 0x75D81000 C:\WINDOWS\system32\mlang.dll
0x71AD0000 - 0x71AD9000 C:\WINDOWS\system32\wsock32.dll
0x71AB0000 - 0x71AC7000 C:\WINDOWS\system32\WS2_32.dll
0x71AA0000 - 0x71AA8000 C:\WINDOWS\system32\WS2HELP.dll
0x71A50000 - 0x71A8F000 C:\WINDOWS\system32\mswsock.dll
0x662B0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71A90000 - 0x71A98000 C:\WINDOWS\System32\wshtcpip.dll
0x76EE0000 - 0x76F1C000 C:\WINDOWS\system32\RASAPI32.DLL
0x76E90000 - 0x76EA2000 C:\WINDOWS\system32\rasman.dll
0x76EB0000 - 0x76EDF000 C:\WINDOWS\system32\TAPI32.dll
0x76E80000 - 0x76E8E000 C:\WINDOWS\system32\rtutils.dll
0x76B40000 - 0x76B6D000 C:\WINDOWS\system32\WINMM.dll
0x722B0000 - 0x722B5000 C:\WINDOWS\system32\sensapi.dll
0x769C0000 - 0x76A73000 C:\WINDOWS\system32\USERENV.dll
0x7D1E0000 - 0x7D492000 C:\WINDOWS\system32\msi.dll
0x76F20000 - 0x76F47000 C:\WINDOWS\system32\DNSAPI.dll
0x76FC0000 - 0x76FC6000 C:\WINDOWS\system32\rasadhlp.dll
0x01BF0000 - 0x01C0C000 c:\progra~1\mcafee.com\vso\McVSSkt.dll
0x7D4A0000 - 0x7D783000 C:\WINDOWS\System32\mshtml.dll
0x746C0000 - 0x746E7000 C:\WINDOWS\System32\msls31.dll
0x746F0000 - 0x7471A000 C:\WINDOWS\System32\msimtf.dll
0x74720000 - 0x7476B000 C:\WINDOWS\System32\MSCTF.dll
0x76390000 - 0x763AD000 C:\WINDOWS\system32\IMM32.DLL
0x325C0000 - 0x325D2000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
0x75C50000 - 0x75CBE000 C:\WINDOWS\System32\jscript.dll
0x02570000 - 0x0257E000 C:\PROGRA~1\PANICW~1\POP-UP~1\XAHook.dll
0x6BDD0000 - 0x6BE05000 C:\WINDOWS\System32\dxtrans.dll
0x76B20000 - 0x76B31000 C:\WINDOWS\System32\ATL.DLL
0x6D430000 - 0x6D43A000 C:\WINDOWS\System32\ddrawex.dll
0x73760000 - 0x737A9000 C:\WINDOWS\System32\DDRAW.dll
0x73BC0000 - 0x73BC6000 C:\WINDOWS\System32\DCIMAN32.dll
0x6BE10000 - 0x6BE6A000 C:\WINDOWS\System32\dxtmsft.dll
0x66E50000 - 0x66E8F000 C:\WINDOWS\System32\iepeers.dll
0x73000000 - 0x73026000 C:\WINDOWS\System32\WINSPOOL.DRV
0x73300000 - 0x73367000 C:\WINDOWS\System32\vbscript.dll
0x039F0000 - 0x03B97000 C:\WINDOWS\system32\Macromed\Flash\FLASH.OCX
0x763B0000 - 0x763F9000 C:\WINDOWS\system32\comdlg32.dll
0x72D20000 - 0x72D29000 C:\WINDOWS\system32\wdmaud.drv
0x72D10000 - 0x72D18000 C:\WINDOWS\system32\msacm32.drv
0x77BE0000 - 0x77BF5000 C:\WINDOWS\system32\MSACM32.dll
0x77BD0000 - 0x77BD7000 C:\WINDOWS\system32\midimap.dll
0x76200000 - 0x76271000 C:\WINDOWS\System32\mshtmled.dll
0x04B80000 - 0x04B8B000 C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
0x66880000 - 0x6688C000 C:\WINDOWS\system32\ImgUtil.dll
0x6D460000 - 0x6D470000 C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
0x6D330000 - 0x6D348000 C:\Program Files\Java\j2re1.4.2_05\bin\jpiexp32.dll
0x76FB0000 - 0x76FB8000 C:\WINDOWS\System32\winrnr.dll
0x6D3A0000 - 0x6D3B8000 C:\Program Files\Java\j2re1.4.2_05\bin\jpishare.dll
0x08000000 - 0x08139000 C:\PROGRA~1\Java\J2RE14~2.2_0\bin\client\jvm.dll
0x04A80000 - 0x04A87000 C:\PROGRA~1\Java\J2RE14~2.2_0\bin\hpi.dll
0x04AA0000 - 0x04AAE000 C:\PROGRA~1\Java\J2RE14~2.2_0\bin\verify.dll
0x04AB0000 - 0x04AC9000 C:\PROGRA~1\Java\J2RE14~2.2_0\bin\java.dll
0x04B10000 - 0x04B1D000 C:\PROGRA~1\Java\J2RE14~2.2_0\bin\zip.dll
0x07CB0000 - 0x07DC2000 C:\Program Files\Java\j2re1.4.2_05\bin\awt.dll
0x07DE0000 - 0x07E31000 C:\Program Files\Java\j2re1.4.2_05\bin\fontmanager.dll
0x73940000 - 0x73A10000 C:\WINDOWS\system32\D3DIM700.DLL
0x6D310000 - 0x6D324000 C:\Program Files\Java\j2re1.4.2_05\bin\jpicom32.dll
0x07F60000 - 0x07F6F000 C:\Program Files\Java\j2re1.4.2_05\bin\net.dll
0x01840000 - 0x01862000 C:\Program Files\Java\j2re1.4.2_05\bin\dcpr.dll
0x71D40000 - 0x71D5C000 C:\WINDOWS\System32\actxprxy.dll
0x767F0000 - 0x76817000 C:\WINDOWS\system32\schannel.dll
0x0FFD0000 - 0x0FFF8000 C:\WINDOWS\system32\rsaenh.dll
0x68100000 - 0x68124000 C:\WINDOWS\system32\dssenh.dll
0x76820000 - 0x76833000 C:\WINDOWS\system32\HLINK.DLL
0x79170000 - 0x79196000 C:\WINDOWS\System32\mscoree.dll
0x79410000 - 0x79425000 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
0x7C340000 - 0x7C396000 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll
0x79480000 - 0x79499000 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
0x5FF20000 - 0x5FF46000 C:\WINDOWS\system32\MSRATING.dll
0x5FF50000 - 0x5FF61000 C:\WINDOWS\system32\msratelc.dll
0x5A620000 - 0x5A67D000 C:\WINDOWS\system32\inetcpl.cpl
0x667D0000 - 0x667ED000 C:\WINDOWS\system32\inetcplc.dll
0x76D60000 - 0x76D79000 C:\WINDOWS\system32\iphlpapi.dll
0x71B20000 - 0x71B32000 C:\WINDOWS\system32\MPR.dll
0x75F60000 - 0x75F67000 C:\WINDOWS\System32\drprov.dll
0x71C10000 - 0x71C1E000 C:\WINDOWS\System32\ntlanman.dll
0x71CD0000 - 0x71CE7000 C:\WINDOWS\System32\NETUI0.dll
0x71C90000 - 0x71CD0000 C:\WINDOWS\System32\NETUI1.dll
0x71C80000 - 0x71C87000 C:\WINDOWS\System32\NETRAP.dll
0x71BF0000 - 0x71C03000 C:\WINDOWS\System32\SAMLIB.dll
0x75F70000 - 0x75F79000 C:\WINDOWS\System32\davclnt.dll
0x75970000 - 0x75A67000 C:\WINDOWS\system32\MSGINA.dll
0x76360000 - 0x76370000 C:\WINDOWS\system32\WINSTA.dll
0x74320000 - 0x7435D000 C:\WINDOWS\system32\ODBC32.dll
0x02170000 - 0x02187000 C:\WINDOWS\system32\odbcint.dll
0x73BA0000 - 0x73BB3000 C:\WINDOWS\System32\sti.dll
0x74AE0000 - 0x74AE7000 C:\WINDOWS\System32\CFGMGR32.dll
0x61580000 - 0x615A4000 C:\WINDOWS\System32\rmoc3260.dll
0x60A20000 - 0x60A68000 C:\WINDOWS\System32\PNCRT.dll
0x5E310000 - 0x5E31C000 C:\WINDOWS\System32\pngfilt.dll
0x59A60000 - 0x59B01000 C:\WINDOWS\system32\DBGHELP.dll
0x76BF0000 - 0x76BFB000 C:\WINDOWS\system32\PSAPI.DLL

Heap at VM Abort:
Heap
def new generation total 1664K, used 1194K [0x10010000, 0x101d0000, 0x10770000)
eden space 1536K, 76% used [0x10010000, 0x10136cd8, 0x10190000)
from space 128K, 12% used [0x10190000, 0x10193df0, 0x101b0000)
to space 128K, 0% used [0x101b0000, 0x101b0000, 0x101d0000)
tenured generation total 21192K, used 14711K [0x10770000, 0x11c22000, 0x16010000)
the space 21192K, 69% used [0x10770000, 0x115cde78, 0x115ce000, 0x11c22000)
compacting perm gen total 5120K, used 4957K [0x16010000, 0x16510000, 0x1a010000)
the space 5120K, 96% used [0x16010000, 0x164e7758, 0x164e7800, 0x16510000)

Local Time = Sat Nov 27 14:40:36 2004
Elapsed Time = 7424
#
# The exception above was detected in native code outside the VM
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2_05-b04 mixed mode)
#

You need to get rid of the trojan.I strongly recommend visiting and running there virus scan.Let them delete it,it shouldnt "screw up java" and worse than it already is.If so,reinstalling java is better than reinstalling windows.

yea thats what i figured...i scanned for and deleted the offending files using mcafee virus scan and the used housecall just to be sure, it showed that my system is clean