The scan doesn't work b/c I don't have the java script, but I did follow the instructions below the scan and the "NI.UWFX6_0001_N69M1503" no longer apears in the log.


Looking at Help and Support Center from my start menu there's a hot to troubleshoot Java problems in internet explorer with the follow instructions:

Java Problems on All Web Sites
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
If you cannot view any Web site that contains Java programs, follow these steps to resolve the issue.

Note This issue may occur if an old version of the NetZip program is installed on your computer and it is configured to start automatically when you start your computer. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
195762 (http://support.microsoft.com/kb/195762/) Problems viewing Java programs with NetZip installed
1. Click Start, click Run, type control inetcpl.cpl, and then click OK.
2. For Internet Explorer 4.x, 5.x, or 6.x, on the Security tab, verify that the Disable Java option is not enabled for the Web content zone in which you are having problems with Java applets.

Note This option is available only with the Custom option in Internet Explorer 4.x and 5.x. Java is not disabled if you have selected High, Medium, or Low security in Internet Explorer 4.x and 5.x. In Internet Explorer 6, Java is disabled by default with a security level of High, and Disable Java is also available as a custom option.

If the Disable Java option is not enabled, or if the Java add-ins that are in the Web content zone are not working, select another safety level for Java, and then follow the steps in the "Determining the Scope of the Java Problem" section to determine whether the issue has been resolved. If the problem still occurs, go to step 4.
3. Change the display settings to a lower resolution and fewer colors. To do so, follow these steps: a. Click Start, point to Settings, click Control Panel, and then double-click Display.
b. On the Settings tab, click 16 Colors in the Color Palette box, and then move the Desktop Area slider to the far left (640 By 480 Pixels).
c. Click OK.
d. Follow the steps in the "Determining the Scope of the Java Problem" section in this article to determine if the issue has been resolved. If the issue has been resolved, notify the video adapter manufacturer of the problem and request a video adapter driver update. If the issue has not been resolved, go to step 4.

4. Change the display settings to 800 by 600 resolution and 256 colors. To do so, follow these steps: a. Click Start, click Run, type control desk.cpl, and then click OK.
b. On the Settings tab, click 256 colors for color, and then move the slider to 800 by 600 pixels.
c. Click OK.
d. Quit System Configuration Editor. If you are prompted to save any files, do so.
e. Restart your computer. When you see the "Starting Windows 95" message, press the F8 key, and then choose Step By Step Confirmation from the Startup menu.
f. When you are prompted to process the Config.sys and Autoexec.bat files, press N. When you are prompted to load all Windows drivers, press Y, and then hold down the SHIFT key while Windows starts to prevent items in the Startup group from being processed.
g. Follow the steps in the "Determining the Scope of the Java Problem" section in this article to determine if the issue has been resolved. If the issue has been resolved, continue with step 6. If the issue has not been resolved, skip to step 7.

5. Perform a clean boot for your operating system and then follow the steps in the "Determining the Scope of the Java Problem" section in this article to determine if the issue has been resolved. If the issue has been resolved, continue with step 6. If the issue has not been resolved, skip to step 7. For additional information on performing a clean boot, click the following article numbers to view the articles in the Microsoft Knowledge Base:
310353 (http://support.microsoft.com/kb/310353/) How to perform a clean boot in Windows XP
281770 (http://support.microsoft.com/kb/281770/) How to perform clean-boot troubleshooting for Windows 2000
267288 (http://support.microsoft.com/kb/267288/) How to perform a clean boot in Windows Millennium Edition
192926 (http://support.microsoft.com/kb/192926/) How to perform clean-boot troubleshooting for Windows 98
243039 (http://support.microsoft.com/kb/243039/) How to perform a clean boot in Windows 95
6. Isolate any conflicts with terminate-and-stay-resident programs (TSRs) or real-mode device drivers. To do so, restart your computer. When you see the "Starting Windows 95" message, press the F8 key, and then choose Step By Step Confirmation from the Startup menu. Press N for every TSR or real-mode device driver. When Windows restarts, follow the steps in the "Determining the Scope of the Java Problem" section in this article to determine if the issue has been resolved. If the issue has not been resolved, continue with step 7.
7. If you connect to the Internet using a local area network (LAN), contact your network system administrator and verify that you have access to Java programs through the network firewall.








Should I try this, or does it perpose to much of a threat b/c I don't know much about my computer or b/c of the worm? or do you know a better method then this one?

OR, am I doing no good looking at the help and support center b/c this isn't my problem?

Not only are you having Java problems but a lack of ActiveX pretty well excludes the use of many fixing and diagnostic tools (Kaspersky, Panda, Housecall) that would help us out significantly but require it. Your malware infections have really impacted your PC to the point where your best option may be to backup all important user files in case you need to do a clean install. It is not likely going to be resolvable the way it was before since our cleaning efforts continue to be hampered and the extent of corruption may be to far imbedded and advanced to reverse.


There are several things we can try but they should only be used as a last resort after you have made your user file backups and are in a position to do a clean re-install. The Java steps which you found probably should be run by a technically inclined person who would be more able to recognize any determinable issues and resolutions. More likely a waste of time and effort.

I'm sorry for my ignorance,


but how would come about making those back up files, and doing a clean reinstall?

You need to copy any user created documents or files you do not wish to lose using one of the following options:

• Could use floppies (1.44 MB each) - generally not practical if a lot of files are involved.
• Acquire some online storage space and upload files to there - may be problems with this given your current issues.
• Use a memory stick/pen drive (up to 2 GB sticks now available) - easiest method.
• Install another adequate size hard drive in your PC and copy all relevant files to that drive (perhaps shop or friend installed) - also a fairly easy method.
• Burn a cd or dvd if you have such a device and know how to use it (minimum 650 MB each).

If you need to get a local repair shop or friend to perform the necessary steps, it is probably best to just backup your critical user files, and do a clean install and be done with it. Remember you had a virus for which you couldn't run a complete cleanup scan, and ActiveX and Java are still not presently working. Success may be possible if you have the time and will to proceed, but is not assured.

I did the restore and Java script is working perfectly! Everything is working great. Having a couple troubles reloading norton, but that can easily be worked out.


Thank you so much for helping me get my computer fixed! I really appreciate it!!

GOOD - another successful warrior overcomes the dark side!




To help avoid serious infection again, please look carefully at this post for some excellent preventative measures. Prevention must be made the first line of defense to improve upon.



ONLY ONCE you are as clean as possible from any needed cleanup steps - As a final cleanup step (after serious infection), it may be advisable to Reset and Re-enable your System Restore to remove any bad files that MAY have been backed up by Windows . The files in System Restore are protected to prevent any programs changing them. And, this is the only complete way to clean these files: (You will lose all previous restore points which could likely be infected, anyway.)

PLEASE NOTE: you will need to log into your computer with an account that has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.


(Windows XP)

FOLDER LOCATION: c:\System Volume Information\_restore….

To Turn OFF System Restore.

1. Click the Start button.
2. Right-click My Computer, and then click Properties.
3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.
4. Click Apply.

REBOOT.

To Turn ON System Restore.

1. Follow the steps in the previous section, but in step 3, uncheck Turn off System Restore or Turn off System Restore on all drives. Then click OK.
2. Create new System Restore points.

(Windows ME)

FOLDER LOCATION: c:\_RESTORE\TEMP\….

See the following link for instructions:
http://service1.symantec.com/SUPPORT...rc=sec_doc_nam




To reduce the re-infection potential for malware and protect your PC against spyware, here are a few helpful suggestions:

1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft . This will patch many of the security holes through which attackers can gain access to your computer . You CANNOT complete this update using an alternate browser – you must use Internet Explorer.
   http://v5.windowsupdate.microsoft.com/v5co...t.aspx?ln=en-us
   http://www.microsoft.com/windows/ie/default.asp
   
   • http://www.securityfocus.com/news/11273
     If you surf to questionable (blockable) parts of the Web, you could encounter sites that compromise your PC without any user interaction. In experiments [reported Aug 2005], Microsoft identified 752 specific addresses owned by 287 Web sites that contain programs able to install themselves on a completely unpatched Windows XP system. Also, be aware that the WinXP Service Pack 2 was an update that focused almost exclusively on security. Also reported was that a fully patched Windows XP SP2 system cannot be compromised by any such discovered rogue Web sites.
   
   
2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching (using a real-time AV tool only one at a time), there are some good free Antivirus programs that are decent, including AVG and Avast!.
   AVG: http://free.grisoft.com/doc/1
   Avast: http://www.avast.com/eng/avast_4_home.html
   
   
3. In addition to using Ad-aware, consider using another free malware scanning/removal program :
   Adaware SE: http://www.download.com/Ad-Aware-SE-Person...ubj=dl&tag=top5
   Spybot S&D: http://www.download.com/Spybot-Search-Dest...tml?tag=lst-0-1
   MS Antispyware beta: http://www.microsoft.com/athome/security/s...re/default.mspx
   
   
4. Consider using a free firewall if you are not already using one (use only one firewall at a time – normally you will need to disable the MS firewall). Some good free ones (for incoming and added outgoing traffic protection) are:
   Kerio Personal Firewall: http://www.sunbelt-software.com/Kerio.cfm
   *** After 30 days, Kerio shuts down selected features, but will continue to run in 'free' mode.
   Zone Alarm: http://www.zonelabs.com/store/content/company/products/znalm/comparison.jsp?lid=ho_za
   
   It is not a bad idea to also consider using a Router/Hardware firewall device where you have a High-Speed Internet access connection. A software firewall may occasionally need to be disabled or it gets/remains disabled by someone or something. Such an added layer of security consistency has a lot of merit to it.
   
   
5. Consider using an alternate free browser for general web surfing but you must use IE for windows updates.
   Mozilla Firefox: http://www.mozilla.org/products/firefox/
   
   
6. Consider increasing your browser security by using these programs:
   SpywareGuard will help protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html
   SpywareBlaster will increase browser protection by blocking access to thousands of known malware sites by adding them to IE's restricted sites zone. It essentially blocks known- bad ActiveX program items from being installed or running on your computer. Download it here: http://www.javacoolsoftware.com/spywareblaster.html
   • If you use SpywareBlaster, you can also use a customblocklist to add even more entries into IE restricted sites zone. Go to this site for the current list and how to use instructions: http://customblockinglist.cjb.net/
     
   • IE-SPYAD is similar in that it adds thousands more known malware sites to IE's restricted zone. Download it here:
     http://www.spywarewarrior.com/uiuc/resource.htm
   
   
7. A HOSTS file can block Internet access to thousands of known-bad sites by not allowing you any easy browser access to such sites knowingly or unknowingly. Use HJT to determine if a current HOSTS file exists and any contents therein:
   • Run the HiJackThis tool and select ‘Open the Misc Tools section’.
   • Next select ‘Open host file manager’ button.
   • Use the ‘Open in Notepad’ button in XP/W2K or use WORDPAD if necessary [type wordpad.exe in the RUN box (Start>Run)] and load the FILE PATH identified in HJT.
   • Go to http://www.mvps.org/winhelp2002/hosts.txt . # Read the initial instructions #. Copy and paste (append or replace) the RELEVANT host address entry contents of that file into Notepad or Wordpad and save the updated file contents.
     
     EXCERPT:
     #start of lines added by WinHelp2002
     # [Misc A - Z]
     127.0.0.1 phpadsnew.abac.com
     127.0.0.1 a.abnad.net
     127.0.0.1 e.abnad.net
     127.0.0.1 www.accoona.com #[Adware-Accoona][Adware.Atoolb][Panda.Accoona]
     .
     .
     .
     #end of lines added by WinHelp2002

*Remember just like your primary anti-virus software, it is important to:

• Keep all of these programs up-to-date, and
• Use them on a regular basis.