Virus: Bugbear.b

[godspeedx]

My computer has been acting up for a while now, but I never thought that it could be a virus. My Panda Antivirus Platinum 7.0 was being updated daily. Nevertheless bugbear slipped through. It disabled panda antivirus and has been slowly messin things up on my comp. Nothing too serious yet.

I've been trying to completely get rid of it and I've finally done so. First I tried a removal tool provided by Panda and I'm not sure if that worked or not. However, it did find the virus and gave me the option to repair damaged files along with deleting infected files and told me to insert my Windows XP Professional Service Pack 1 CD. So I popped the CD that I used to install XP, the only xp cd I have, and it says that that's not the right disc. Then I used Mcafee's removal tool and norton's removal tool and that completely got rid of the virus.

But now my system is still screwy. Any antivirus I put on my machine (panda and mcafee) gets disabled. Is there any way to repair the damaged files and get my computer back to normal? Some of the things that are messed up:

-my SBAudigy2 sound mixer dealy icon in the lower right hand corner of my screen is gone
-at startup I get a message telling me that at least one thing failed to start up or something like that
-Half Life has been "sticking" while in a game every 30 seconds or so - it's like lag but not internet connection related
-Windows Media Player has been doing the same "sticking" thing

Is my best bet reformatting?

Any Help? Thanks In Advance.

 

[StraightPipe]

low format is the only way to be sure it's a dead virus.

 

[godspeedx]

what's "low format"?

 

[MercenaryForHire]

Originally posted by: godspeedx
what's "low format"?

Low-level format. Can be done with the toolset/driver disk from your HD manufacturer. Keep nothing.

- M4H

 

[StraightPipe]

when you format it really is a "quick format"
ie: erases first 300MB and last 100MB on drive.

"Low format" actually writes 0's to whole drive, leaves nothing.

You would of course have to reload everything!

 

[godspeedx]

Ooooooh, gotcha. So if I did that I shouldn't even burn any files or anything onto a CD because they might have part of the virus?

 

[vaporize]

http://www.eicar.org/anti_virus_test_file.htm

try that link, you can download a harmless fake virus to test

 

[godspeedx]

Originally posted by: vaporize
http://www.eicar.org/anti_virus_test_file.htm

try that link, you can download a harmless fake virus to test

To test what?

 

[N8Magic]

If you're AV programs were disabled, how do you know you have the virus?

I think I might have it too, my computer has been acting up lately too.

 

[oldfart]

Symantec has good removal tools. Take a look here

 

[godspeedx]

I apologize for having a long original post, but I did explain the last to replys' topics in there. I did use symantec's (norton's) removal tool and it got rid of it. The problem is my computer is still kinda borked from it. Things aren't repaired, the virus was just deleted. I've done some online scans and I don't appear to have any viruses so it's gotta be that my computer is just still messed up from it. I think the only way to fix it is reformat. I think I'll be buying a new HD and then if i forget to backup anything I'll still have the old HD. Then when I'm all set I'll give my brother the old one. Reformatted, of course.

 

[Macro2]

"Antivirus I put on my machine (panda and mcafee)"

are you running two at once? Thats a no no.

 

[oldfart]

Originally posted by: godspeedx
I apologize for having a long original post, but I did explain the last to replys' topics in there. I did use symantec's (norton's) removal tool and it got rid of it. The problem is my computer is still kinda borked from it. Things aren't repaired, the virus was just deleted. I've done some online scans and I don't appear to have any viruses so it's gotta be that my computer is just still messed up from it. I think the only way to fix it is reformat. I think I'll be buying a new HD and then if i forget to backup anything I'll still have the old HD. Then when I'm all set I'll give my brother the old one. Reformatted, of course.

Missed that part. Sorry. Sounds like you have some missing...broken files. A clean install would not be a bad idea. How about a repair install? Sometimes just reinstalling the service pack will clean things up too.

 

[Mitzi]

I don't think a low level format is required. Just format the drive and install a fresh copy of Windows. It'll be quicker than trying to solve all the bitty problems you are suffering.

 

[godspeedx]

Originally posted by: Macro2
"Antivirus I put on my machine (panda and mcafee)"

are you running two at once? Thats a no no.

No, I have tried them both at seperate times.

Ok, thanks. I'm going to call Panda's tech support tonight, I'll let you know what they say.

 

[spambot]

Try the Trend (they make PC-Cillin, ScanMail, etc.) HouseCall anti-virus service. It's free and it's up to date. Here is the link. Click on "Scan now" and follow the instructions.

I think, to be honest, that you need to reformat anyway. It sounds like you're crapped right out.

Good luck!

 

[godspeedx]

Yeah I've been using that. I'm about to call Panda right now, but I'll most likely end up buying a new hard drive, transfering any stuff I want from this one to the new one, and giving this one to my brother after reformatting it. There's just too many little things going wrong and it'd be better to just start over completely, not taking any chances.

 

[Smilin]

Originally posted by: vaporize
http://www.eicar.org/anti_virus_test_file.htm

try that link, you can download a harmless fake virus to test

Or just use my sig

Bugbear, Klez and some of the other more rampant ones these days disable antivirus software. If your antivirus is working right this wont happen, but once it does you'll have to scrap and reinstall your AV. Do this:

1. Uninstall any antivirus you have, disable system restore (see XP help files) reboot
2. Run the removal tool from symantec (I've used it successfully about 20 times - never tried the others)
3. Without rebooting, reload your antivirus and update the defs.
4. Reboot and run a full scan - delete anything you find.
5. Turn system restore back on and make a restore point.
6. Uninstall then Reinstall SB drivers and apps.
7. Reboot and see if you're still getting failed services messages. If you are, check the system event viewer and come back here to post what's failing and we'll go from there.


Edit: you may be headed for that format, but try the above first. I think some of your issues may work themselves out during the course of this.

 

[godspeedx]

Ok, I just did a full system scan with panda using a tool they have that will scan your system from command prompt. It found one virus and deleted it, however nothing has changed. I'm going to go eat and then do what Smilin suggested and I'll get back to you.

Thanks.

 

[godspeedx]

I used symantec's removal tool for Klez and ElKern and it didn't find either virus.
I think I'm gonna end up reformatting =(.

 

[Smilin]

Oh well, don't sweat it. A Formatted computer is a happy computer.

 

[WoofyJr]

Glad I found this, I was trying to "cure" my friend's computer that got that virus bugbear.b. The norton antivirus caught it and put into qurantined and she deleted it. So, I went over there and did some research to find what kind of virus she got. I looked into log file and found that it was bugbear@b. So I decided to go into safe mode and do anitvius scanning but it didnt find any virus at all. I was annoyed that it wasnt detected because the outlook express was corruputed so it's obviously the virus causing that. So I was nt sure what to do. I had two choices to try use the removal tool first or format and clean installation. My friend decided to call her brother who is expert on computer. We decided to go ahead and use removal tool to see what happens. The removal tool still didnt dectect that virus. We assumed it was safe so we had to figure a way to fix outlook express problem. Her brother figured out another way to fix the outlook express and it worked. The problem is solved, however, I still get a werid feeling somethng is not right. It bothers me as if the virus is still in the registry files that hasnt removed yet. So when I got home and did more research on symantec website. I finally realized that we didn't disbale the system restore first before using the removable tools. It says if we dont disable system restore, the tool might fail.

So my question: Should I do it all over agian by disabling the system restore and do the removable tool in safe mode to see what happens??? Or forget it, it should be fine?

 

[mechBgon]

Yes, disable System Restore and have it delete all the System Restore files it's saved, so there's no place for the virus to hide.