virus help

[cw]

Hello,
My computer with windows XP has a virus called I worm/bagle.n in 27 files.
had same problem last week when i got a message saying windows file names
had been changed and I needed to run XP disk .So i did that not knowing it
was because of a virus at that time and Halfway though xp setup it stopped
and said couldn't continue because it couldn't find Dll files I thiink it
was. So I had to take PC into shop I got it from and he said it was a virus
and he charged me $80 to remove it.He said it was that virus that i named
earlier. Anyway today i turned off system restore as i read u should do this
in xp when scanning and it found all these files affected but AVG can't heal
the files and wants to move them to vault but when I tryed to do that I got
message saying this file is needed for windows to start so ignore it . I am
not sure what to do at this point. Do I send all the files to vault even
though they are needed to run windows ? Do I put in XP disk ? Will it just
do the same as last time and not finish setup and I can't get on PC at all
then.
Any ideas'a please.

 

[Juan]

Greetings:

Go to following link for information about that specific virus, (the
name is not exactly the same, but it's the closest to it...I believe it's a
variant)..
http://www.sss.ca/sensible/home.nsf/dbba53c6c83b1b38852568c900172115/7b26116
b5079508685256e56007935c7?OpenDocument

Mistakes you probably made that allowed the virus to get in your system:
Had not enabled the XP Firewall.
Had not updated your antivirus
Had not updated your system
Had not configured your Outlook Express to not allow e-mail attachments to
open.
Trusted an e-mail account message you should have ignored and deleted.

Instructions to remove from your system.
http://c.moreover.com/click/here.pl?j138043760&w=2188326

After you remove it go here and get a virus scan to be sure wiped it out.
http://www.pandasoftware.com/products/activescan/

Read instruction to enable, and all about the WXP Firewall.
http://support.microsoft.com/default.aspx?scid=kb;en-us;324731&Product=winxp

Hope this helps.


------------------------Original Message----------------------------

 

[David Qunt]

Greetings:

Go to following link for information about that specific virus,
(the
name is not exactly the same, but it's the closest to it...I believe
it's a variant)..
http://www.sss.ca/sensible/home.nsf/dbba53c6c83b1b38852568c900172115/7b
26116 b5079508685256e56007935c7?OpenDocument

Mistakes you probably made that allowed the virus to get in your
system: Had not enabled the XP Firewall.
Had not updated your antivirus
Had not updated your system
Had not configured your Outlook Express to not allow e-mail
attachments to open.
Trusted an e-mail account message you should have ignored and deleted.

Instructions to remove from your system.
http://c.moreover.com/click/here.pl?j138043760&w=2188326

After you remove it go here and get a virus scan to be sure wiped it
out. http://www.pandasoftware.com/products/activescan/

Read instruction to enable, and all about the WXP Firewall.
http://support.microsoft.com/default.aspx?scid=kb;en-us;324731&Product=
winxp

Hope this helps.


------------------------Original Message----------------------------

Hello,
My computer with windows XP has a virus called I worm/bagle.n in 27 files.
had same problem last week when i got a message saying windows file
names had been changed and I needed to run XP disk .So i did that not
knowing it was because of a virus at that time and Halfway though xp
setup it stopped and said couldn't continue because it couldn't find
Dll files I thiink it was. So I had to take PC into shop I got it
from and he said it was a virus
and he charged me $80 to remove it.He said it was that virus that i
named earlier. Anyway today i turned off system restore as i read u
should do this
in xp when scanning and it found all these files affected but AVG
can't heal
the files and wants to move them to vault but when I tryed to do that
I got
message saying this file is needed for windows to start so ignore it
. I am
not sure what to do at this point. Do I send all the files to vault
even though they are needed to run windows ? Do I put in XP disk ?
Will it just do the same as last time and not finish setup and I
can't get on PC at all then.
Any ideas'a please.

Roll on SP2 so people like this are protected by default.

 

[D.Currie]

Hello,
My computer with windows XP has a virus called I worm/bagle.n in 27 files.
had same problem last week when i got a message saying windows file names
had been changed and I needed to run XP disk .So i did that not knowing it
was because of a virus at that time and Halfway though xp setup it stopped
and said couldn't continue because it couldn't find Dll files I thiink it
was. So I had to take PC into shop I got it from and he said it was a virus
and he charged me $80 to remove it.He said it was that virus that i named
earlier. Anyway today i turned off system restore as i read u should do this
in xp when scanning and it found all these files affected but AVG can't heal
the files and wants to move them to vault but when I tryed to do that I got
message saying this file is needed for windows to start so ignore it . I am
not sure what to do at this point. Do I send all the files to vault even
though they are needed to run windows ? Do I put in XP disk ? Will it just
do the same as last time and not finish setup and I can't get on PC at all
then.
Any ideas'a please.

It's a really nasty virus. If it's a new infection, you might be able to
stop it, but it seems to "grow" over time. Sooner or later the computer will
bog down to the point where it won't run much at all. I had one in the shop
with over 6000 infected files. I ran multiple scans and it kept finding and
fixing more files, deleting more files...it was a huge mess.

And some of the AV programs aren't very good at detecting that virus, it
seems -- or maybe that virus is just better at hiding from some of the
scanning tools. One scan came up clean, while another found hundreds of
files still there.

You can try the "stinger" tool from McAfee and see what that comes up with.
Make sure you set it to scan all files. Keep scanning until nothing is left.
You may need to set it to delete files once it can't heal any more. And you
may need to reboot to get it to clean out the last few system files. And run
the scans in safe mode. And turn off system restore, since it hides there as
well. And delete all of your temporary file and empty the recycling bin, so
you don't have to bother scanning there.

You might be best off saving your data that you need and then formatting and
reinstalling fresh. Don't save any EXE files.

If you have a huge number of infected files, they could end up being
damaged, even if they are healed. And some may get deleted in the process,
so you're going to need to do some reinstalling, in any case.

And as nasty as that virus is, I'd be skeptical that it was gone unless you
ran multiple scans with multiple AV programs and all of them come up clean.
Even then, keep a close watch and run the scanning tools (like stinger) on a
regular basis, just to make sure it's not coming back.