Why is "enter the search term" such a popular search term? Overture reports 175410 last month. That's wierd. So, if you happen to come to this site looking for "enter the search term", I'd love to know why.
Posted by torque at September 3, 2004 4:26 PM | TrackBackI manage a Windows 2000 system with Spybot-Search and destroy. In addition to Symantec message from above, Spybot also mention a LCA (or LSA) entry asking reboot to remove. But rebooting is of no use.
I identified a setup-bz0705.exe file in C:\, most likely the initial source of the trojan. It suggests trojan evolved by some sort of randomize of its name. I searched for xpjava.exe / see the above post on June 11 /. Found xpjava in C:\WINNT\system32. Checking the attributes of xpjava (right-mouse button) indicates to be an archive (it is in fact a HEX exe). The attributes cann't be changed because it is in use. So, I copied xpjava.exe from C disk to floppy A. On floppy, it is not in use, so the attribute can be changed by clicking on right-mouse button (I unclicked on "archive" attribute). I moved back xpjava from floppy to C !!! It was accepted and the xpjava from C is now not in use and it can be sent to Recycle Bin.
After that, run Symantec and quarrantine the msdirectx.sys file and Spybot to remove the entry after rebooting.
Stupid solution for stupid trojan !!!!
Social networking site MySpace is to block users from uploading copyrighted music to its pages...
Posted by: Josue Leger at December 14, 2006 10:42 AM