Bawindow.exe

[Don]

Bawindow (I-worm/bagle.au) was detected as a virus
but my program is unable to delete it. It recommended
that I move it to the virus vault. I tried to do that but
it said that it was not accessible. I can find the
program listed in "windows/system32/bawindow.exe" but I
cannot delete it. How can I rid my pc of this virus?
I ran Spy-bot and Ad-aware also without success.

Thank You,
Don

 

[David H. Lipman]

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
5) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




| Bawindow (I-worm/bagle.au) was detected as a virus
| but my program is unable to delete it. It recommended
| that I move it to the virus vault. I tried to do that but
| it said that it was not accessible. I can find the
| program listed in "windows/system32/bawindow.exe" but I
| cannot delete it. How can I rid my pc of this virus?
| I ran Spy-bot and Ad-aware also without success.
|
| Thank You,
| Don

 

[Randy Byrne]

Try this:

http://www.grisoft.com/us/us_remtext.php?id=bagbugnet

Download it, start in safe mode, and run it.

 

[Guest]

Bawindow (I-worm/bagle.au) was detected as a virus
but my program is unable to delete it. It recommended
that I move it to the virus vault. I tried to do that but
it said that it was not accessible. I can find the
program listed in "windows/system32/bawindow.exe" but I
cannot delete it. How can I rid my pc of this virus?
I ran Spy-bot and Ad-aware also without success.

Thank You,
Don

No anti-virus can remove a virus/worm/trojan that is active just like defrag
can't defrag a file that is in use, reboot into safe mode and rescan.

 

[Don]

To all who responded.
Thank you for your help. I tried David's way with Trend and
all worked well. I guess the main thing was to boot in
"safe mode" and run the programs. I got rid of the virus
and all is well.
Thanks again, Much

Don