Removing the I-Worm/Bugbear virus

Hi,
A friend of mine had the bugbear virus on her old computer running Windows 98 SE and asked me to help her get rid of it.

I brought her computer home and installed AVG Free Virus Checker. I ran the virus checker and indeed it found the viruses and several files were put into the Vault. They were:
C:\WINDOWS\NOTEPAD.EXE Virus found I-Worm/Bugbear
C:\WINDOWS\SYSTEM\MMQKKKP.DLL repaired
C:\WINDOWS\TEMP\VBA1163.TMP Virus found I-Worm/Bugbear
C:\WINDOWS\All Users\Start Menu\PROGRAMS\Disabled Startup Items\IIQY.EXE Virus found I-Worm/Bugbear
C:\Program Files\Internet Explorer\IEXPLORE.EXE Virus found I-Worm/Bugbear
C:\Program Files\Outlook Express\MSIMN.EXE Virus found I-Worm/Bugbear
C:\Program Files\Windows Media Player\MPLAYER2.EXE Virus found I-Worm/Bugbear

The problem is now that I am not able to get into Internet Explorer because they are locked up in the vault and the AOL software isn't opening Web Pages.

Could you please tell me what I should do to get IE back, outlook, and the others working properly again.

Thank you.

Jean

 

Try
Im Not sure if the IE repair will work, its worth a try
In control panel addremove programs find and start the uninstall of Microsoft internet explorer & tools..
If not listed try this run comand, go start run copy paste this >
rundll32 setupwbv.dll,IE6Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g "C:\WINDOWS\IE Uninstall Log.Txt "
Hit ok then choose repair
That Might correct an outlook problem to, let us know ?

If No luck run the installer
C:\WINDOWS\Windows Update Setup Files\ie6setup.exe
if not there Look here
C:\Program files\internet explorer\ie6setup.exe

Notepad can be found here for most systems
http://www.richardthelionhearted.com/~merijn/winfiles.html#notepad

For now hang tight our other forum members will probaly have a better easyer plan

 

Hi,
Thanks for the prompt answer. It seems as though I do have Internet Explorer repaired doing what you told me to do but Outlook Express did not get repaired and when I click it, it can't locate the file. Any ideas how to get this back and working.

I do have Notepad back too.


Can I delete the vault files that were quarantined after I get the programs all repaired. What about Windows media Player that was put in the vault.

Thanks,
Jean

 

I just was able to download and Install IE 6 from the Microsoft site and I think it fixed Outlook Express now.

Now, am I able to delete the quarantined item in the AVG virus checker.

Thanks for your help.

Jean

P.S. I must quit for now and get ready for the hurricane. I live about 40 miles north of Tampa, FL.

 

I Hope the weather passes you and your's by

Im Note sure where to grab a copy of "MPLAYER2.EXE" do a google search and take your pick, but use coution. Maybe our forum member know a safe site to get it from ?
I had thought it would be in a cab file In this folder
C:\WINDOWS\Windows Update Setup Files
Looking at this
http://support.microsoft.com/default.aspx?scid=kb;en-us;311872
But i dont see one there myself.

I would just leave the viri vault alone for now, but yes of couse they can be gotton rid of, check that these are indeed gone also
C:\WINDOWS\SYSTEM\MMQKKKP.DLL
C:\WINDOWS\TEMP\VBA1163.TMP
C:\WINDOWS\All Users\Start Menu\PROGRAMS\Disabled Startup Items\IIQY.EXE

Then go get two free online scans
Trend Micro-Free online Scan: http://housecall.trendmicro.com/
set it to autoclean, if it cannot tell it to delete found files.


BitDefender AntiVirus Free Scan, check all box's except auto clean, then have it delete the file if it's is not a windows file, Might also need to turn off any PopupBlockers: http://www.bitdefender.com/scan/licence.php

If there are any problems Copy there report's back here please.

 

Well, I think the storm has changed directions and might not hit us (Tampa area) so I'm back to work on the virus problem.

Now that I've downloaded IE 6 do you think that I have the correct MPLAYER2.EXE? I see it in my C:\WINDOWS\Windows Update Setup Files.

I did check the other files and there was nothing showing on the system. They are all gone.

Thank you so much, I think I finally have the virus gone and hopefully no other problems will come up.

Jean

 

That should work, just extract MPLAYER2.EXE to the media player folder

Thats the basic version I think thats used when we choose to have the mediabar shown in IE.

Was anything found at those onlines ?

 

Hi Lonny,

Thanks for all your help. I was able to extract the MSPLAYER. All is working great now. The virus is gone, all programs open with no problem. I returned the computer to my friend today and she was so happy. Hopefully she will keep the virus checker up-to-date so she doesn't get infected again.

Thanks for all the help. I don't know what I would do without this help support group. They have helped me solve many problems before.

Jean