TechSpot

Help Remove bgates.exe, and stop the pop up for the download

By Excelsion
Jul 8, 2006
  1. When i am online a download keeps coming up for me to download bgates.exe and i would like to know how can i get rid of it, and i also get pop telling me have a virus on my computer and i need to download there virus scanner from this link http://scanner.sysprotect.com, plz help me

    Thanks in advance
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go HERE and follow the instructions exactly.

    Post a fresh HJT log into this thread, only after doing the above.

    I have deleted your other thread on this subject, as it is not required.

    Regards Howard :wave: :wave:
     
  3. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    ok i did it, and as i went to come to this site i got the pop up for the bgates.exe :(
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You have an LSP problem.

    Go HERE and follow the instructions.

    Then post a fresh HJT log.

    Regards Howard :)
     
  5. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    Okkk did what you told me
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    It`s getting better, but we still have some way to go before your system is clean.

    Go to the following links and follow all the instructions exactly.

    First HERE, then HERE and finally HERE.

    Post a fresh HJT log after doing the above.

    Regards Howard :)
     
  7. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    alright, did it
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Download and run the Ccleaner programme from HERE.

    Then, download the Pocket killbox programme from HERE. Extract it, but don`t run it yet.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    rdgUS2404.exe

    Close task manager.

    Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {9CDD8D24-6B88-4945-8E25-EA934DE41B56} - C:\WINDOWS\system32\mllmm.dll (file missing)

    O4 - HKLM\..\Run: [VAIOSURVEY] C:\Program Files\Sony\VAIO Survey\SurveySA.exe

    O11 - Options group: [INTERNATIONAL] International*

    O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/1.0.0971.28/WinSSWebAgent.CAB

    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab

    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgUS2404.exe

    O17 - HKLM\System\CS1\Services\Tcpip\..\{408F8A72-EB72-425E-BC30-73009E0A8898}: NameServer = 167.206.3.138,167.206.3.204<Only fix this, if it doesn`t belong to your ISP.

    O20 - AppInit_DLLs: C:\WINDOWS\system32\taskmgr.dll

    O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\g47416046.dll (file missing)

    O20 - Winlogon Notify: winubg32 - C:\WINDOWS\SYSTEM32\winubg32.dll

    Click on the fix checked button.

    Close HJT.

    Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted.

    These are the filepaths you need to enetr into Killbox.

    C:\WINDOWS\SYSTEM32\winubg32.dll
    C:\WINDOWS\system32\taskmgr.dll

    Once your system has rebooted, turn system restore back on and post a fresh HJT log.

    Regards Howard :)
     
  9. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    I really appreciate this man!

    here is the log
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    a0cc7245.exe

    Close task manager.

    Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll (file missing)

    O4 - HKLM\..\Run: [a0cc7245.exe] C:\WINDOWS\system32\a0cc7245.exe

    O4 - HKCU\..\Run: [a0cc7245.exe] C:\Documents and Settings\Khalil\Local Settings\Application Data\a0cc7245.exe

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll (file missing)

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll (file missing)

    O20 - Winlogon Notify: winubg32 - winubg32.dll (file missing)

    Click on the fix checked button.

    Close HJT.

    Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted.

    These are the filepaths you need to enter into killbox.

    C:\Documents and Settings\Khalil\Local Settings\Application Data\a0cc7245.exe

    C:\WINDOWS\system32\a0cc7245.exe

    Once your system has rebooted, turn system restore back on and post a fresh HJT log.

    Regards Howard :)
     
  11. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    here it is after doing what you told me.
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Well done, your HJT log is now clean.

    Regards Howard :)
     
  13. Excelsion

    Excelsion TS Rookie Topic Starter Posts: 25

    Thanks alot man i really appreciate it!! :D :D
     
  14. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    No problem mate.

    If you have any further spyware/virus problems, please post them in this thread.

    Regards Howard :)
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...