PE_BUBE.A Virus

Discussion in 'Malware Help (A Specialist Will Reply)' started by sirtims54, Oct 10, 2005.

  1. sirtims54

    sirtims54 Private E-2

    Can anyone tell me how to get rid of this PE_BUBE.A virus withour having to reformat my computer? Thanks
     
  2. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis
     
  3. sirtims54

    sirtims54 Private E-2

    Thanks for the reply. I am also having another problem. Just about everything I go into I get an error message that internet explorer has caused an invalid page fault in.......? Also Illegal message pops up too. What do I have missing in my software on win 98 se that might cause this? Thanks.
     
    Last edited: Oct 11, 2005
  4. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    The trojan may very well be part of the problem with IE. Download the tools you need from the sticky using another computer and burn them to CD, then install and run on your computer.

    Also you may want to install Firefox and use it for the time being.

    Download the following two files, create a folder on your desktop, and call it TSC. Save these 2 files there!

    Sysclean Package
    Pattern.zip


    Unzip Pattern.zip, then delete the zip file.

    Once you have these downloaded into the folder you just created, REBOOT INTO SAFE MODE!

    Once in Safe Mode, double click the file sysclean.com; when system cleaner loads, click SCAN to start the scanner.
     
  5. sirtims54

    sirtims54 Private E-2

    Hey Shadow. Thanks. I went through the steps and this is what happened. I must have a bad bug on here. It want let me run AVG, Firefox, Sycleaner or the other one. I get an error message every time. Wha it will let me run is spybot and x-cleaner. On Spybot only 3 bugs I get is WINDOWS SECURITY CENTER ANTIVIRUS.DISABLENOTIFY, WINDOWS SECURITY CENTER UPDATE.DISABLENOTIFY, and WINDOWS SECURITY CENTER FIREWALL.DISABLENOTIFY So I went in and followed Trend House Call's advice and went into the registry and booted back up and went to Find Files and folders and it didn't show up this time and didn't show up when I ran Spybot. Now when I go to run one of these programs you suggested I get and error message that say's some type of file is missing or something is corrupted? Sometimes I get the message an illegal Operation and will be shutdown or something to that effect? So I must have some more bugs on here or something preventing me from runnig the programs you suggested. Want me to run Hi Jack This and send the log to ya? SirTims
     
  6. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    That is why I told you to run the scan from SAFE MODE. When in Safe Mode, Windows only loads the bare minimum drivers for the system to be operational. Most forms of Malware won't run in SAFE MODE.

    If you are getting these messages in SAFE MODE then you have serious issues at the OS level.
     
  7. sirtims54

    sirtims54 Private E-2

    I tried it in Safe Mode and got the same problems. What is the bad news? Reformat?.......
     
  8. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    If you can't run any of the tools, then I have no idea what type of malware is on your computer. You may want to post in the software forum about your IE issues. A reinstall of Internet Explorer is an option. If you think a clean install of the OS is what you need, then that is your call.
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    TIP: Explorer.exe may be infected. You should try to replace it with a clean copy.

    If this is Win98, you can easily do that after booting in MS DOS mode.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Something else that sometimes helps with problems like this: terminate the explorer shell before trying to run the scanners.
     
  11. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Thank you, chas. I should have look that up.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No problem! :)

    Make sure all copies of explorer.exe are replaced with a clean version.
     
  13. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Boot to MS-DOS mode at the command prompt issue the following commands; pressing enter after each command:
    NOTE: Replace d with the actual drive letter of your CD drive.

    If explorer.exe is located anywhere else on your drive replace it also.

    No reboot and try the scans.
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You never told him to locate his Win98 CD and put it in the CD drive. ;) Hopefully he has it.
     
  15. sirtims54

    sirtims54 Private E-2

    Howdy. I went and restored this thing to an earlier date. This must have restored some of my files that were corrupted cause I was able to download Firefox. I didn't get an error message. But I still get a "internet explorer illegal operation message every once in awhile. Talking about the exployer.exe that is where I have the PE_BUBE.A virus at. Trend say's to locate the host file and delete it, but I have no ideal what that file is? So ya'll have some great solutions. I would rather not try and do a reformat if I can get the virus out of Explorer.EXE I sure do appreciate ya'll's help on this. I am learning but it is really slow. Might be due to "Sometimers" Sometimes I get it and Sometimes I don't. LOL I have the Windows 98 SE CD setup. So if I did do a wipe on the hardrive and restore. It should get rid of the Virus and restore my operating system right? If it comes to that I would appreciate ya'll's input on the best way to go about it. will try what ya'll said to do first. Then we will see what happens. Will report the results back to ya. I really appreciate ya'll's help greatly.......James
     
  16. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Is the file name exployer.exe or explorer.exe. If the file name is exployer.exe the boot into safe mode and loacte the file using Find FIles in the Start Menu and delete it.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds