Strange Behavior

There is a new entry in my start-up items: Javaub32.exe. Even if I disable
it from starting up using a startup manager, it keeps reappearing. If I
disable it after starting the computer, it re-enables itself after I open
Internet Explorer. Any ideas what this file is? It is located in the
Windows/System folder and has only been on my computer a few days. I haven't
installed anything recently so I suppose it got there somehow while browsing
the internet. I do have Adaware and Spybot installed and will try running
them after getting the latest updates. Just thought someone out there might
know what I'm dealing with.

Thanks,
Leigh

--
(Remove the NOT to reply by email.)

I find no reference to it.

Update your anti-virus app and then run a full-system virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...CWShredder.exe
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it, click its 'Check for
Updates' link in the app to install updates, then use it to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forum.aumha.org/
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm

Additional reading:
Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

http://doxdesk.com/parasite/CoolWebSearch.html
and
http://www.merijn.org/cwschronicles.html
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Leigh" wrote in message
...
There is a new entry in my start-up items: Javaub32.exe. Even if I disable
it from starting up using a startup manager, it keeps reappearing. If I
disable it after starting the computer, it re-enables itself after I open
Internet Explorer. Any ideas what this file is? It is located in the
Windows/System folder and has only been on my computer a few days. I haven't
installed anything recently so I suppose it got there somehow while browsing
the internet. I do have Adaware and Spybot installed and will try running
them after getting the latest updates. Just thought someone out there might
know what I'm dealing with.

Thanks,
Leigh

--
(Remove the NOT to reply by email.)

Thanks for the advice. Have tried CWShredder, AdAware, Spybot, and Norton.
I've post my HJT log onto 2 different forums. I've been advised that it's
probably a Trojan. Will do further research.

Thanks again,
Leigh

--
(Remove the NOT to reply by email.)
"glee" wrote in message
...
I find no reference to it.

Update your anti-virus app and then run a full-system virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...CWShredder.exe
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it, click its 'Check
for
Updates' link in the app to install updates, then use it to scan your
system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan your system, and
then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save
Log"
button.
Press that, save the log somewhere you can find it (Desktop, My
Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix
anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forum.aumha.org/
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm

Additional reading:
Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

http://doxdesk.com/parasite/CoolWebSearch.html
and
http://www.merijn.org/cwschronicles.html
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Leigh" wrote in message
...
There is a new entry in my start-up items: Javaub32.exe. Even if I
disable
it from starting up using a startup manager, it keeps reappearing. If I
disable it after starting the computer, it re-enables itself after I
open
Internet Explorer. Any ideas what this file is? It is located in the
Windows/System folder and has only been on my computer a few days. I
haven't
installed anything recently so I suppose it got there somehow while
browsing
the internet. I do have Adaware and Spybot installed and will try
running
them after getting the latest updates. Just thought someone out there
might
know what I'm dealing with.

Thanks,
Leigh

--
(Remove the NOT to reply by email.)