Windows system files infected

Fred in Ca. · 10th December 2003

I just ran a virus scan with AVG and have two windows system files infected that the program won't delete. c:\WINDOWS\System32\LVPFKA.DLL & c:\WINDOWS\System32\FTVH.EXE The virus is identified as the I-worm/bugbear. How do I clean these files or replace them? Lonnie, HELP!! Thanks, Fred

Daizy · 10th December 2003

Hi Fred
Have you tired using the Bugbear removal tool?

aleekat · 10th December 2003

This may be the version your infected with. If not, go to symantec, and look at the virus dictionary, bugbear is listed under "W32. Symantec

Fred in Ca. · 11th December 2003

I want to thank both Daisy & Aleeka for responding to my call for help. I downloaded the Bugbear removal tool suggessted by Daisy, and after running it, to my surprise, there was a message that No Bugbear virus was found. I tried to download the W23 from Symatec suggessted by Aleeka, but it would only let me download an update to a Symatec virus program (which I don't have). I did download a Virus program from Computer Associates called eTrust EZ Armor security suite. Guess what? After running the antivirus, NO viruses found. At the same time I was continually getting the error messages that the virus infected files cannot be removed: I-Bugbear. Any suggestiones? Is there a fake virus?
Thanks, Fred

**Lonny Jones** · 11th December 2003

Fred in Ca. Hi
You cant run two anti virus programs at the same tim nor use the others resident scanner

these are the folks you should listen to Daizy, Aleeka

Daizy linked you to http://securityresponse.symantec.com...er/FixBugb.exe

and heres the other
http://securityresponse.symantec.com...r/FxBgbear.exe

Grisoft also has a tool
http://www.grisoft.com/softw/removers/rmbugbear.exe
which is for both a and b
I-Worm/Bugbear.A
I-Worm/Bugbear.B
be sure to read about it first >
http://www.grisoft.cz/virbase/virbas...ng=us&type=web

Let us know what happens
Lonny

Fred in Ca. · 13th December 2003

Lonnie; Just to clarify my last message, I only ran one virus program at a time. I ran the EZ Armor program several more times, and it didn't find any virus's. I disabled it and ran the AVG anti- virus twice again, and on the second time it eliminated and/or cleaned all the Bugbear infected files. No more error messages. I really appreciate all the help from you, Daisy, and Aleeka. I don't really know as much as I think I do, obviously.
Thanks again, Fred

Fred in Ca. · 13th December 2003

My apology Aleekat for spelling your name wrong. Thanks again for your help.
Fred

**Lonny Jones** · 13th December 2003

Hi thats good to here.

what I mean and most people dont understand is you have to stop one from loading with windows,when letting the other start w/windows. as far as I know we can disable our resident then use the other while in windows though.

Ive been occasionaly switching beween AVG free and antivir
avg has two things to disable in msconfi anti vir only has one.

Or is that what youve done ?
Regards
Lonny

Fred in Ca. · 13th December 2003

I had removed one or the other virus programs, though I still had the downloads saved to open later if needed. I'm not sure what you referred to when you said AVG only has two things to disable. I only disabled the system restore function.
Fred

**Lonny Jones** · 13th December 2003

Hi fred
do you still have both avg and the etrust armor sweet installed.

I'll have to let the others describe this ,,Im not familur enough with XP systems.

Lonny

Fred in Ca. · 13th December 2003

Lonnie, I only have the AVG free installed and running. The EZ Armor is not installed, but I still have the download. While I have your attention, I have one other small problem. When my computer boots up, my CD drive automatically comes open on the start, and I have to manually close it. Not a real problem, just a great nuisance.
Fred