virus win32/nuqel.e

[Sissy Sniffen]

I am running Windows XP w/AVG antivirus. I somehow got a virus that shows up
through security warnings telling me my computer is infected. I can not
navigate to any programs such as spybot or malwarebytes' anti-malware w/o a
pop up box telling me "the application cannot be executed. the file mbam.exe
is infected. do you want to activate your antivirus software now?". I also
can not run my task manager or registry to try to remove this virus. the
threat is called WIN32/NUQEL.E -- any help would be very much appreciated.

Sissy Sniffen

 

[David H. Lipman]

From: "Sissy Sniffen" <Sissy (e-mail address removed)>

| I am running Windows XP w/AVG antivirus. I somehow got a virus that shows up
| through security warnings telling me my computer is infected. I can not
| navigate to any programs such as spybot or malwarebytes' anti-malware w/o a
| pop up box telling me "the application cannot be executed. the file mbam.exe
| is infected. do you want to activate your antivirus software now?". I also
| can not run my task manager or registry to try to remove this virus. the
| threat is called WIN32/NUQEL.E -- any help would be very much appreciated.

| Sissy Sniffen

My G-d...
EVERYBODY thinks every piece of malware is a "virus". It just blows my mind!!!

Sissy, you don't have a virus. You do have malware. All viruses are malware but now all
malware are viruses.

Download, install, update and then execute, Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 

[The Real Truth MVP]

Your answer was very rude and it was wrong. Re-read the question and try
again.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

 

[Sissy Sniffen]

From: "Sissy Sniffen" <Sissy (e-mail address removed)>

| I am running Windows XP w/AVG antivirus. I somehow got a virus that shows up
| through security warnings telling me my computer is infected. I can not
| navigate to any programs such as spybot or malwarebytes' anti-malware w/o a
| pop up box telling me "the application cannot be executed. the file mbam.exe
| is infected. do you want to activate your antivirus software now?". I also
| can not run my task manager or registry to try to remove this virus. the
| threat is called WIN32/NUQEL.E -- any help would be very much appreciated.

| Sissy Sniffen

My G-d...
EVERYBODY thinks every piece of malware is a "virus". It just blows my mind!!!

Sissy, you don't have a virus. You do have malware. All viruses are malware but now all
malware are viruses.

Download, install, update and then execute, Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.
I am sorry that I am not that knowledgeable in the area of virus' versus malware - that is why I am in this discussion group asking for help.

I mentioned in my first post that I have malwarebytes' anti-malware already
installed but the malware won't let me run it. A pop up box comes up saying
that the application cannot be executed.

Any other suggestions?

 

[Shenan Stanley]

<snipped>

David H. Lipman wrote:

You do have malware. All viruses
are malware but now all malware are viruses.

<snipped>

I feel it necessary to determine your meaning here.

I assume it is a typo, but one that changes the actual meaning of the
sentence. If it is not a typo - that's quite the declaration (or should
their be a <sarcasm> </sarcasm> around it?)

 

[John Wunderlich]

=?Utf-8?B?U2lzc3kgU25pZmZlbg==?= <Sissy
(e-mail address removed)> wrote in

I am running Windows XP w/AVG antivirus. I somehow got a virus
that shows up through security warnings telling me my computer is
infected. I can not navigate to any programs such as spybot or
malwarebytes' anti-malware w/o a pop up box telling me "the
application cannot be executed. the file mbam.exe is infected. do
you want to activate your antivirus software now?". I also can
not run my task manager or registry to try to remove this virus.
the threat is called WIN32/NUQEL.E -- any help would be very
much appreciated.

Sissy Sniffen

Write-up here:

http://protectyoursecrets.symantec....writeup.jsp?docid=2009-012310-1626-99&tabid=2

HTH,
John

 

[Sissy Sniffen]

Thank you John, but I can not open SYSTEM in the Control Panel either. I can
navigate to there, but can not go any further. I am still able to open
Firefox but not much else. I can not open MS Office programs either.

 

[Sissy Sniffen]

after further research, on my own via the internet, i found the simple answer
from a post on ask.com. all i needed to do was restart the computer in safe
mode and then i was able to run malwarebytes. the program found the "trojans
and infected files" and removed them. i hope that this post will help
someone else out in the future.

 

[David H. Lipman]

From: "Shenan Stanley" <[email protected]>

| <snipped>

| David H. Lipman wrote:
| <snipped>

| I feel it necessary to determine your meaning here.

| I assume it is a typo, but one that changes the actual meaning of the
| sentence. If it is not a typo - that's quite the declaration (or should
| their be a <sarcasm> </sarcasm> around it?)

Typo...

All viruses are malware but _not_ all malware are viruses.

 

[David H. Lipman]

From: "Sissy Sniffen" <[email protected]>


| I mentioned in my first post that I have malwarebytes' anti-malware already
| installed but the malware won't let me run it. A pop up box comes up saying
| that the application cannot be executed.

| Any other suggestions?

Go to;
C:\Program Files\Malwarebytes' Anti-Malware

COPY
mbam.exe

to
SISSEY.COM

Execute;
SISSEY.COM

 

[Carmel]

I mentioned in my first post that I have malwarebytes' anti-malware
already installed but the malware won't let me run it. A pop up box
comes up saying that the application cannot be executed.

Any other suggestions?

There is a whole thread on the Malewarebytes forum regarding problems
getting 'malwarebytes' to start when the system is infected.

The most suggested answer is to start in safe mode, with networking
enabled. Then start the program update it and run it in full scan mode.

If that does not work, contact me an I will describe the procedure to
remove a service that may be starting up in safe mode and stopping
'malwarebytes' from executing.

Ciao

--
Carmel |::::=======
|::::=======
|===========
|===========
|

 

[Sissy Sniffen]

David - I want to say, now that I am not frustrated trying to fix my
computer, that you shouldn't be in these forums to help people if you are to
be nasty. That is like the teacher who yells at the kids all day and
punishes them but says she wants to teach children. I am a "normal" small
business owner that has some knowledge of the computer and came on here
asking for help and had to listen to your wise remarks at a very sensitive
time. Thanks for nothing as I have enough knowledge to already have
malwarebytes installed on my computer - so your post was useless. IF you
would have read my initial question properly, I think you would have seen
that I know what I am talking about but needed help from an expert - one of
which you are not.

Best Regards,
Sissy

 

[Leythos]

Your answer was very rude and it was wrong. Re-read the question and try
again.

The Real Truth http://pcbutts1-therealLIE.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

Talk about RUDE - you're still stalking David, myself, and others in
every post you make....

 

[Leythos]

I mentioned in my first post that I have malwarebytes' anti-malware already
installed but the malware won't let me run it. A pop up box comes up saying
that the application cannot be executed.

Any other suggestions?

http://www.simplysup.com/tremover/download.html

Download TRJ 6.8.1, update it, run it, then run it in safe mode.

I've found that almost all the newest malware targets MBAM, SBS&D, and
all the AV products on the market - running TRJ first will remove enough
of the malware to let you reinstall MBAM and others, including your AV,
and then run them to completion.

 

[Buffalo]

after further research, on my own via the internet, i found the
simple answer from a post on ask.com. all i needed to do was restart
the computer in safe mode and then i was able to run malwarebytes.
the program found the "trojans and infected files" and removed them.
i hope that this post will help someone else out in the future.

"Sissy Sniffen" wrote:

Glad it worked for you.
Renaming mbam.exe to something like Sissy.com would probably also
worked, as David Lipman suggested.
Buffalo

 

[Buffalo]

David - I want to say, now that I am not frustrated trying to fix my
computer, that you shouldn't be in these forums to help people if you
are to be nasty.

He wasn't being nasty IMO.
As far as The Real Truth MVP goes, he/she/it is not an MicroSoft MVP and is
never to be trusted. Don't believe me, do a search for The Real Truth MVP.

Your reply, just below, is very nasty and rude.

That is like the teacher who yells at the kids all
day and punishes them but says she wants to teach children. I am a
"normal" small business owner that has some knowledge of the computer
and came on here asking for help and had to listen to your wise
remarks at a very sensitive time. Thanks for nothing as I have
enough knowledge to already have malwarebytes installed on my
computer - so your post was useless. IF you would have read my
initial question properly, I think you would have seen that I know
what I am talking about

I re-read your initial post several times and I never did get the idea that
you really knew what you were talking about.

but needed help from an expert - one of which
you are not.

He is one of the very best experts in this forum regarding viruses and
malware. Yes, he did miss seeing that you tried to run MBAM before you
posted, but when he did, he told you to basically rename mbam to
sissey.com and then try to run it.
This topic has come up many times about mbam.exe and if you would have
done a 'Find' in this forum or the AntiVirus or Spyware forums, you
would have found your own answer 'without' even having to post and risk
getting your feeling hurt. Perhaps you didn't know you could do that, but it
can be a great timesaver, especially when the same problem comes up about
every other day.
Please don't be so 'snippy' ,Sissy, after all, these are volunteers who go
out of their way to help those who come here.

Best Regards,
Sissy

Buffalo

 

[David H. Lipman]

From: "Sissy Sniffen" <[email protected]>

| David - I want to say, now that I am not frustrated trying to fix my
| computer, that you shouldn't be in these forums to help people if you are to
| be nasty. That is like the teacher who yells at the kids all day and
| punishes them but says she wants to teach children. I am a "normal" small
| business owner that has some knowledge of the computer and came on here
| asking for help and had to listen to your wise remarks at a very sensitive
| time. Thanks for nothing as I have enough knowledge to already have
| malwarebytes installed on my computer - so your post was useless. IF you
| would have read my initial question properly, I think you would have seen
| that I know what I am talking about but needed help from an expert - one of
| which you are not.

| Best Regards,
| Sissy

Oooo, Ouch.

Nasty ?
Nope, I wasn't nasty. Condescending maybe but definitely not nasty.

Nasty is PCBUTTS1 who is a fake Microsoft MVP, software plagiarizer, liar, thief and
general malicious actor and is using the present 'nym of "the real truth".

Nasty are people like K-Man. You have NO IDEA what "nasty" is on the Internet in general
or Usenet to be specific.

As for NOT answering your query. I apologize. I make mistakes and I'm not 100%. As for
saying that I am no expert. You have no idea of my expertise and the shear numbers I have
assisted both in answering Usenet questions or by providing my Multi AV Scanning Tool as
CareWare. Additionally, you came back and YOU posted this message which may be considered
"nasty". Did you see my AM reply when I discerned the mistake ? I provided information
on how to rename the MBAM executable to a .COM file so it could be executed in Normal Mode
(Safe Mode doesn't always work. In your case it did).

I will repeat this because it is worth repeating (and my spelling should be correct this
time)...

/* All viruses are malware but not all malware are viruses. */

 

[Carmel]

Glad it worked for you.
Renaming mbam.exe to something like Sissy.com would
probably also worked, as David Lipman suggested.
Buffalo

Actually, older versions of MBAM would hang after doing a scan if the
file were renamed.

In any case, visit this URL:

http://forums.malwarebytes.org/index.php?showforum=7

and check out this topic:

Pinned: Procedures to help resolve issues preventing MBAM from running

In any case, the safest, fastest and most effective method of running
MBAM is in safe mode.

--
Carmel |::::=======
|::::=======
|===========
|===========
|

 

[David H. Lipman]

From: "Buffalo" <[email protected]>




| He wasn't being nasty IMO.
| As far as The Real Truth MVP goes, he/she/it is not an MicroSoft MVP and is
| never to be trusted. Don't believe me, do a search for The Real Truth MVP.

| Your reply, just below, is very nasty and rude.

| I re-read your initial post several times and I never did get the idea that
| you really knew what you were talking about.

| He is one of the very best experts in this forum regarding viruses and
| malware. Yes, he did miss seeing that you tried to run MBAM before you
| posted, but when he did, he told you to basically rename mbam to
| sissey.com and then try to run it.
| This topic has come up many times about mbam.exe and if you would have
| done a 'Find' in this forum or the AntiVirus or Spyware forums, you
| would have found your own answer 'without' even having to post and risk
| getting your feeling hurt. Perhaps you didn't know you could do that, but it
| can be a great timesaver, especially when the same problem comes up about
| every other day.
| Please don't be so 'snippy' ,Sissy, after all, these are volunteers who go
| out of their way to help those who come here.


| Buffalo



Thank you -- You are too kind

 

[Buffalo]

Actually, older versions of MBAM would hang after doing a scan if the
file were renamed.

In any case, visit this URL:

http://forums.malwarebytes.org/index.php?showforum=7

and check out this topic:

Pinned: Procedures to help resolve issues preventing MBAM from running

In any case, the safest, fastest and most effective method of running
MBAM is in safe mode.

Thanks for the link, but I think renaming is faster and most responders tell
folks to run the 'latest' version of MBAM.
But, I will check out that forum.
Thanks again,
Buffalo