virus win32/nuqel.e

On Tue, 16 Feb 2010 10:11:58 -0700
Buffalo Buffalo articulated:



Sissy Sniffen wrote:
after further research, on my own via the internet, i found the
simple answer from a post on ask.com. all i needed to do was
restart the computer in safe mode and then i was able to run
malwarebytes. the program found the "trojans and infected files"
and removed them. i hope that this post will help someone else out
in the future.

"Sissy Sniffen" wrote:

Glad it worked for you.
Renaming mbam.exe to something like Sissy.com would
probably also worked, as David Lipman suggested.
Buffalo

Actually, older versions of MBAM would hang after doing a scan if the
file were renamed.

In any case, visit this URL:

http://forums.malwarebytes.org/index.php?showforum=7

and check out this topic:

Pinned: Procedures to help resolve issues preventing MBAM from running

In any case, the safest, fastest and most effective method of running
MBAM is in safe mode.

--
Carmel |::::=======
|::::=======
|===========
|===========
|

From: "Buffalo"



| Sissy Sniffen wrote:
David - I want to say, now that I am not frustrated trying to fix my
computer, that you shouldn't be in these forums to help people if you
are to be nasty.

| He wasn't being nasty IMO.
| As far as The Real Truth MVP goes, he/she/it is not an MicroSoft MVP and is
| never to be trusted. Don't believe me, do a search for The Real Truth MVP.

| Your reply, just below, is very nasty and rude.

That is like the teacher who yells at the kids all
day and punishes them but says she wants to teach children. I am a
"normal" small business owner that has some knowledge of the computer
and came on here asking for help and had to listen to your wise
remarks at a very sensitive time. Thanks for nothing as I have
enough knowledge to already have malwarebytes installed on my
computer - so your post was useless. IF you would have read my
initial question properly, I think you would have seen that I know
what I am talking about

| I re-read your initial post several times and I never did get the idea that
| you really knew what you were talking about.

but needed help from an expert - one of which
you are not.

| He is one of the very best experts in this forum regarding viruses and
| malware. Yes, he did miss seeing that you tried to run MBAM before you
| posted, but when he did, he told you to basically rename mbam to
| sissey.com and then try to run it.
| This topic has come up many times about mbam.exe and if you would have
| done a 'Find' in this forum or the AntiVirus or Spyware forums, you
| would have found your own answer 'without' even having to post and risk
| getting your feeling hurt. Perhaps you didn't know you could do that, but it
| can be a great timesaver, especially when the same problem comes up about
| every other day.
| Please don't be so 'snippy' ,Sissy, after all, these are volunteers who go
| out of their way to help those who come here.


Best Regards,
Sissy

"David H. Lipman" wrote:

From: "Sissy Sniffen" Sissy

I am running Windows XP w/AVG antivirus. I somehow got a virus
that shows up through security warnings telling me my computer is
infected. I can not navigate to any programs such as spybot or
malwarebytes' anti-malware w/o a pop up box telling me "the
application cannot be executed. the file mbam.exe is infected. do
you want to activate your antivirus software now?". I also can not
run my task manager or registry to try to remove this virus. the
threat is called WIN32/NUQEL.E -- any help would be very much
appreciated.

Sissy Sniffen

My G-d...
EVERYBODY thinks every piece of malware is a "virus". It just blows
my mind!!!

Sissy, you don't have a virus. You do have malware. All viruses
are malware but now all malware are viruses.

Download, install, update and then execute, Malwarebytes'
Anti-Malware http://www.malwarebytes.org/mbam/program/mbam-setup.exe

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

| Buffalo



Thank you -- You are too kind :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Carmel wrote:
On Tue, 16 Feb 2010 10:11:58 -0700
Buffalo Buffalo articulated:



Sissy Sniffen wrote:
after further research, on my own via the internet, i found the
simple answer from a post on ask.com. all i needed to do was
restart the computer in safe mode and then i was able to run
malwarebytes. the program found the "trojans and infected files"
and removed them. i hope that this post will help someone else out
in the future.

"Sissy Sniffen" wrote:

Glad it worked for you.
Renaming mbam.exe to something like Sissy.com would
probably also worked, as David Lipman suggested.
Buffalo

Actually, older versions of MBAM would hang after doing a scan if the
file were renamed.

In any case, visit this URL:

http://forums.malwarebytes.org/index.php?showforum=7

and check out this topic:

Pinned: Procedures to help resolve issues preventing MBAM from running

In any case, the safest, fastest and most effective method of running
MBAM is in safe mode.

Thanks for the link, but I think renaming is faster and most responders tell
folks to run the 'latest' version of MBAM.
But, I will check out that forum.
Thanks again,
Buffalo