Error by Removal of Addware - Spybots from WIN2000 by Norton Antiv

[Guest]

Hello, I am trying to find out how to locate the Command Line in the
following error message. THE DYNAMIC LINK LIBRARY CBAXFR.DLL could not be
found in the specified path
C:\WINNT\system32\cba;.;C:\WINNT\system32;C:\WINNT\system;C\WINNT;C:\WINNT\system32;C:\WINNT;C:\WINNT\system32\Wbem.

This is a problem caused after removing Spyware from my computer with Norton
Antivirus 10.0.1.1000. My computer now shows this error upon each startup.

This is a nusance error, it seems as though I can click through with no
further problems. I am simply trying to find out how to get rid of this
errant command line. I have searched C drive for the command line above, and
the Registry, but with no luck. Any ideas? Merry Christmas, and I am off to
Iraq in 10 days.

 

[Dave Patrick]

Natively you can; Start\Settings\Control Panel\Administrative Tools\Computer
Management(Local)\System Information\Software Environment\Startup
Programs|View|Advanced, then in the "Location" column, you'll find the path
to the "Startup" location either in the "Startup" directories or from the
registry's "Run" keys. (note that this window is read-only so you must
manually navigate to the location below to edit or otherwise delete)

%ALLUSERSPROFILE%\Start Menu\Programs\Startup
%USERPROFILE%\Start Menu\Programs\Startup

You can delete the shortcuts that you no longer want to run.


HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You can delete the string value for the program you no longer want to run.

or copy msconfig from Windows XP to the "windows" directory
or AutoRuns from sysinternals
http://www.sysinternals.com/Utilities/Autoruns.html


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hello, I am trying to find out how to locate the Command Line in the
| following error message. THE DYNAMIC LINK LIBRARY CBAXFR.DLL could not
be
| found in the specified path
|
C:\WINNT\system32\cba;.;C:\WINNT\system32;C:\WINNT\system;C\WINNT;C:\WINNT\system32;C:\WINNT;C:\WINNT\system32\Wbem.
|
| This is a problem caused after removing Spyware from my computer with
Norton
| Antivirus 10.0.1.1000. My computer now shows this error upon each
startup.
|
| This is a nusance error, it seems as though I can click through with no
| further problems. I am simply trying to find out how to get rid of this
| errant command line. I have searched C drive for the command line above,
and
| the Registry, but with no luck. Any ideas? Merry Christmas, and I am off
to
| Iraq in 10 days.
| --
| gray

 

[David H. Lipman]

From: "gray boyett" <[email protected]>

| Hello, I am trying to find out how to locate the Command Line in the
| following error message. THE DYNAMIC LINK LIBRARY CBAXFR.DLL could not be
| found in the specified path
| C:\WINNT\system32\cba;.;C:\WINNT\system32;C:\WINNT\system;C\WINNT;C:\WINNT\system32;C:\WIN
| NT;C:\WINNT\system32\Wbem.
|
| This is a problem caused after removing Spyware from my computer with Norton
| Antivirus 10.0.1.1000. My computer now shows this error upon each startup.
|
| This is a nusance error, it seems as though I can click through with no
| further problems. I am simply trying to find out how to get rid of this
| errant command line. I have searched C drive for the command line above, and
| the Registry, but with no luck. Any ideas? Merry Christmas, and I am off to
| Iraq in 10 days.

G-d Speed to you in Iraq. I pray for the safety of our fine men and woman of the US armed
forces in harm's way !

What is in; %windir%\system32\cba that needs to be in the path ? Is it something you
installed ?

Just to make sure you have indeed removed the malware and have nothing left, I suggest the
following...


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

* SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon
http://www.definitivesolutions.com/bhodemon.htm

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *

 

[nt4-ever]

http://www.processlist.com/info/cbaxfr.html