IndiGenus. Hijackthis.log is attached.
Main Topics
Browse All TopicsI found suddenly this problem when I reboot my pc. It says "Error loading c:\Windows\System32\_00c76
This file is reported as Trojan virus by Symantec virus detector. However, I can not cleanup by the program. On the other hand, Windows says this file is not found. I'm puzzled. Need help to solve this problem.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Well that helps. That is not the only problem you have either. I recommend you do the following:
Download and Run ComboFix (by sUBs) You must run it directly from your Desktop.
http://download.bleepingco
Disable your Anti-virus and any real-time Anti-spyware monitors that are running.
Then double click Combofix.exe & follow the prompts.
When finished, it will produce a log for you. Upload that log in your next reply with a new HijackThis log.
Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall.
Note 2: Remember to re-enable your Anti-virus and Anti-spyware.
NOTE: If you have issues connecting to your network or internet after running combofix you can either simply reboot, or do the following:
* Going to Control Panel > Network Connections.
* Right click on their Network icons & select "Repair"
or
Alternately, if the Network icon appears in the notification area in the lower right corner of Desktop, right-click it, and then click Repair from the shortcut menu.
PLEASE ALSO NOTE: Combofix will typically fix most and sometimes all Malware entries but many times a script is also needed to finish cleaning up. So please keep CF until advised whether you need the script or not.
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
--------------------------
File::
C:\WINDOWS\system32\webmai
C:\WINDOWS\system32\netpia
C:\WINDOWS\system32\webmai
C:\WINDOWS\system32\2E7670
C:\WINDOWS\system32\__c007
Folder::
C:\Program Files\koreandoumi1.0
Registry::
[-HKEY_LOCAL_MACHINE\~\Bro
[HKEY_LOCAL_MACHINE\SOFTWA
"a8de5a65"=-
"NetpiaLite"=-
[-HKEY_LOCAL_MACHINE\softw
--------------------------
3. Save the above as CFScript.txt on your desktop.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.
5. After reboot, (in case it asks to reboot), please upload the following reports/logs.
-Combofix.txt
-A new HijackThis log
Run Msconfig and see if mentioned and checked on the Startup tab. if so, uncheck, reboot and run these programs in safe mode:
1. Malwarebytes from www.malwarebutes.com
2. SuperAntiSpyware from SuperAntiSpyware.com
3. Download and install the trial of Symantec Endpoint
If you still have a problem, go to ww.trendmicro.com and run HouseCall
Business Accounts
Answer for Membership
by: IndiGenusPosted on 2008-03-11 at 10:45:25ID: 21098093
The file is probably gone, that's why the error. Problem is likely that it's still trying to be loaded from a registry entry.
/portal/en -US/threat _analytics / HJTInstal l.exe
Post a HijackThis log and that may identify where.
http://www.trendsecure.com
Click on "Do a system scan and save a log file" button. Post the text from the log file. Do not have HJT fix anything at this point.
Please do not post the log into the comment window. Use "Attach File" under the comment window to post the log.