bagle removal problems...

Discussion in 'Malware Help (A Specialist Will Reply)' started by oliverdeath, Feb 21, 2008.

  1. oliverdeath

    oliverdeath Private E-2

    hi i have strange bagle virus...

    i already read this thread:
    Bagle removal, the other way
    http://forums.majorgeeks.com/showthread.php?t=152033
    but my problem seems different

    It all begin when some programs started to crash, some not start, nod32 went missing... :/ Windows are not starting in safe mode, but working without bigger problem. I managed to identify a virus, but nod32 didn't have time to update, it was a day late :(
    Nod32 does not start up anymore but i managed to scan drive from another computer through network (nod32 updated). Besides few locked files, the computer seems clean. I scaned memory from online kaspersky virus scaner. No infection found.

    When i read "bagle removal the other way", i downloaded MGtools and attach the file. I removed windows messenger. Avanger wont start - "Error executing program! "

    I found suspicious file that i ran yesterday and scan it online(i can't scan it anymore as nod32 on another computer is blocking access as it findes virus):
    How can you name a virus if each company has different name for same virus?

    I would appreciate any help or suggestions. Thanks.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  3. oliverdeath

    oliverdeath Private E-2

    I work out through the procedure...
    i dont have any malware removal programs - i only used nod32.
    i removed java versions...
    I came at the end - "Download and install CCleaner"

    I managed to install ccleaner (clean reboot before instalation) but when i start the application it get's killed after few seconds. Nothing is showing up. After few runs it doesnt even show up in taska manager - processes.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to try and run thru the complete procedure I gave you and then attach the 3 logs that were requested:
    • C:\ComboFix.txt
    • SUPERAntispyware log
    • C:\MGlogs.zip - this must be run again since you ran it before doing the other steps.
    A big part of your problem is all the malware executables in the below folder:

    C:\WINDOWS\system32\drivers\down
     
  5. oliverdeath

    oliverdeath Private E-2

    still having problems.

    i installed all aplications, but only MGtools works.

    From Spybot i get
    c:\documents and settings\.....\Combofix.exe is not a valid win32 application.
    ccleaner doesn't start up.
    super antispyware free edition starts up, even asks if i'd like to update. Than hangs. It uses all processor power bot nothing happens. Doesen't matter if i try to update or not.
    and similar with other products it says C:\..... is not a valid win32 application.
     

    Attached Files:

  6. oliverdeath

    oliverdeath Private E-2

    i downloaded another version of combo-fix
    http://download.bleepingcomputer.com/sUBs/Combo-Fix.exe
    and it fixed some things. I also got an combofix.txt :)
    from nod32 i still get an not a valid win32 application, ccleaner seems to work fine. i'll try to run through antimalware aplications again.
     

    Attached Files:

  7. oliverdeath

    oliverdeath Private E-2

    combo-fix solved most of the problems. I did few scanes with ccleaner, superantispyware, spybot S&D Each fixed few problems. I reinstalled my nod32 and everything works without a problem. :)

    Thx for help. :cool
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds