Confused About Win32: Bamital-X

[kyte350x]

Hello! For one reason or another i have been infected with the win32 Bamital X virus. And as much as i try i cannot seem to remove it. I tried to follow instructions on the internet to delete it from my registry, but that doesnt seem to work well, and i have tried combofix but that doesnt remove it either. I also try to follow along to what people are doing to get rid of it in previous posts, but it is too complicated for me to follow. Can anyone help?

[mikaelrask]

welcome to the forum.

try a  boot scan with avast

http://www.schmahl.net/avastbootscan.php

if avast is not finding the infection try malwarebytes antimalware

http://www.filehippo.com/download_malwarebytes_anti_malware/

in your post you sad you had scanned with combofix please post that scan result here so we can have a look

good luck and write back if you need more help from us.

[kyte350x]

I have run both Malwarebytes and Avasts boot scan. and they both come up saying either winlogon.exe is infected or win32:bamital-X.
I attatched the log to this post.

[Pondus]

Try this

Hitman Pro 3 - Second Opinion Malware Scanner  http://www.surfright.nl/en/hitmanpro
DrWeb CureIt http://www.freedrweb.com/cureit/?lng=en
How Do I Use Dr.Web CureIt!? http://www.freedrweb.com/cureit/how_it_works/
Norman Malware Cleaner http://www.norman.com/support/support_tools/58732/en

[Pondus]

If the above does not work, the follow this guide from Essexboy and post the log`s
http://forum.avast.com/index.php?topic=53253.0

To avoid using 20 post with copy and paste you have to attach the log`s

Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. and MBAM scan log )

[kyte350x]

Just Ran all of those programs, then restarted my computer. Upon Reboot Avast didnt Detect any viruses! Thank you very much

[Pondus]

Just Ran all of those programs, then restarted my computer. Upon Reboot Avast didnt Detect any viruses! Thank you very much

did any of them detect anything?
which one? and what was detected / removed

[polonus]

Manually removal instructions:

http://www.fasterpccleanclean.com/remove-win32-bamital-x#how-to-remove

polonus

[superhacker]

Thanks polonus ,it is time to test auto it 3,i will make a program to remove the infection but i have a question"since i dont have a copy of the virus"what are the  processes name of the virus?and when i do the remover where i can put so others can use?

[kyte350x]

It was the norman malware cleaner that caught it and cleaned it.

[superhacker]

So no need to my cleaner :'(

[marockee]

Manually removal instructions:

http://www.fasterpccleanclean.com/remove-win32-bamital-x#how-to-remove

polonus

this looks kinda FAKE to me, correct me if I'm wrong

[Pondus]

Manually removal instructions:

http://www.fasterpccleanclean.com/remove-win32-bamital-x#how-to-remove

polonus

this looks kinda FAKE to me, correct me if I'm wrong

Well Polonus does not post fake info

[marockee]

uh, sorry, my bad I misread "To find a Win32/Bamital.X registry key, select “ Edit,” then select “ Find,” and in the search bar type any of Win32/Bamital.X ‘s registry keys", I thought it says to explicitly search for "bamital" coz that's what I read on one really fake "remove bamital" site 
I removed it with Hitman, but I'm missing some stuff in one Win dialog so I don't know if anything else is missing, should I open new thread?

[Pondus]

I removed it with Hitman, but I'm missing some stuff in one Win dialog so I don't know if anything else is missing, should I open new thread?

If you need help with malware removal ? yes