Does anyone know what bbb.exe is ? I cant kill the process or delete it from the drive. I think its a culprit that has slowed everything down ???
skiff,
The file bbb.exe is a virul file of no significant benefit. If you cannot kill the process, start your computer in safe mode, then do a manual search for the file and delete it.
The file usually gets to you through AIM or Yahoo messgenger.
Good luck.
When done, run a full virus scan with Avast.
Bye
I tried to delete in safe mode and it did not work
skiffman, please read this and follow those instructions… post back if you solved your problem…
How to Remove the AOL Profile Virus
How to Remove the AOL Profile “Virus”
Run the Fix Tool.
Open & run the fix tool ( CLICK ME ). Choose to open the file, NOT save.
If you are running Windows 95/98/ME, you need to be in Safe Mode. Save the above file to a disk and run it from safe mode.
Edit Your AIM Profile.
Change your profile back to what you want. Make sure you delete the link from your AIM profile or your friends will get infected!
Install, Update, Immunize, and Run SpyBot
Install SpyBot (skip this step if SpyBot is already installed & proceed to “Update SpyBot”)
Download Spybot from here http://www.download.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button
Choose to OPEN the file. DO NOT choose to SAVE it.
Follow the installation instructions, you can choose default settings
Update SpyBot
Either click on the SpyBot shortcut on your desktop or open it by going to Start, All Programs, Spybot - Search & Destroy, Spybot - S&D (Easy Mode).
Click on Search For Updates.
When SpyBot is finished searching for updates, it will tell you which updates are available.
Click on Download Updates. Wait until the download completes.
Immunize with Spybot
On the left side, click on Immunize.
Under Permanent Internet Explorer Immunity, click on the Immunize button.
Under Permanently Running Bad Download Blocker For Internet Explorer, make sure Block All Bad Pages Silently is chosen, and click on Install.
Scan with Spybot
On the left side, click on Search & Destroy.
At the bottom of the screen, click on the Check for Problems.
When the search is complete, click on Fix Selected Problems.
Keep spybot updated, immunized, and scan weekly to prevent future problems.
Manual Removal Instructions (if above instructions do not work)
Stop the Virus from Running.
Press Ctrl+Alt+Delete just once at the same time on your keyboard. This will bring up the Task Manager.
Find the process labeled “b.exe” or “bbb.exe” and press end program. (If you’re running Windows XP, you may have to click on the Processes tab.)
Delete the Infected File.
Press Start, followed by search or find. If you have Windows XP, then click files and folders.
Type “b.exe; bbb.exe” in the search.
When found, delete the file named “b.exe” or “bbb.exe”.
Cheers !
skifmann,
I am at a loss to explain why you cannot delete in safe mode the file, however, Sasha’s instructions are lenghty but thorough.
Should this also fail to remove the bbb.exe, then I would suggest Safe Mode, then access DOS, navigate to the file directory and remove it from there.
If you are not comfortable performing all the instructions and changes in Sasha’s post, then you might want to try a small single program designed by Jay Loden called AIM Fix which will remove all known AIM viri. http://jayloden.com/AIMFix.exe
Let us know how things are going. We will come up with a way to remove it.
Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.
O.K. Just wanted to say thanks to all you people from AVAST a class program in its own right----Tried the first fix from SZ but it said I didnt have the key so I was clean----Then put in S&D and ran it it found a few cookies and one bad file—Then I went back into the process and bbb was gone but it had morphed into rrr.exe–So I did a internet search and it said it was a 32 randon virus and to download STINGER from mcafee --Ran stinger and low and behold it found the bbb and 6 others and deleted them all I hope—I think I am good to go now and thanks to everyone that replied—PS. Win2k PRO and everytime I tried to delete bbb it said the source code was in use and even in safe mode It would already would be in the few processes at startup thanks again
We are all glad that you seem to have found the remedy.
The “bbb” is a type of polymorphic virus which can mutate and regenerate which you have seen.
Whether the “rrr” was indeed a variant of the original, or one that the original allowed to be downloaded remains to be seen. Since you were given the “source code in use” message, then I would think that the bbb had morphed into the rrr. The virus tries to protect itself from you getting at it.
It seems as of now you have triumphed! ;D
Keep an eye on your “processes” to insure that such viri do not reoccur.
Spybot and Adaware are major defenders…use them regularly.
Even though Avast On Access modules are running, do a full Avast AV scan with Archives at least once a month.
I would also recommned installing a good registry cleaner as well.
Good luck and glad you stopped by to meet us!
Note, you could use avast! Virus Cleaner (http://www.avast.com/files/eng/aswclnr.exe), a standalone application as Stinger to do that.
As good as the Avast Virus Cleaner is…
It is not set up to remove the “bbb.exe” or variant as far as I understand its’ limitations.
It is however, highly effective for the viri it was designed to remove:
http://www.avast.com/eng/down_cleaner.html
Good luck.