21 September 2007 5:26
I seems that OneCare reports that I have Win32/BGugBear.B.Dam on my system and One Care reports that quarantine efforts have failed.
(I am running Vista Ultimate)
21 September 2007 12:29
this kind of infection are found in the following location:
C:\WINDOWS\Profiles\"your profile" \Local Settings\Application Data\Microsoft\Outlook\outlook.pst-
>Attachment.42: "name of the document may vary from what you have"
they may look like this
They are located in this file
( thats why it cant be addressed by onecare since its within or a part of your e-mail - they are attachments and this files are locked down by outlook express )
For on hand support from WLOC about this issue please proceed with the link below
use the "Get More Help" link in the lower right of the page to contact support via email.
21 September 2007 12:51
Thanks for the info
I will give it a try this evening.
One more thing, when OneCare identified the virus, the "Win32/BugBear.B.Dam" was a link that took me to the OneCare site (home page) but did not provide any information specific to the Virus.
I was expecting the link to provide me with the info you sent
I will try removing the virus and post the results.
21 September 2007 13:07
Thank you for pointing such out, maybe the WLOC team can add such instances for this resources to be available, in any please proceed with the link I indicated for assistance from Onecare Support for reasons that what I have posted is the said infection on XP base machine, since you are using Vista ( the location might varry if you are using the Windows Mail or so you upgraded an XP to Vista along with the old outlook folders )
They have a mechanism in WLOC 2.0 to create a support log and such will pin point the exact location of those file.
But in all instances they would be in your e-mail as one of your attachments and more than likely it is among the junk mail you filtered or so part of your regular mail.
21 September 2007 16:18Moderator
I think that Milo's information should help you with the problem, but see this post regarding the ever so helpful (that was sarcasm) "Quarantine Failed" message -
As for the link sending you to the OneCare home page, that sure doesn't seem too helpful either. If you could,
Please file a bug on Connect: https://connect.microsoft.com/site/sitehome.aspx?SiteID=168
See the Bug Submission Guide - http://connect.microsoft.com/content/content.aspx?ContentID=3480&SiteID=168 - for details on how to create and submit the Support Log zip file with your bug.-steve
09 Nopember 2007 17:21
I the world of everchanging signatures and heuristical
protection, a blank page isn't that uncommon. You can
take credit for being one of the first to find a new variant!
Seriously though, I have the exact same problem with OneCare.
It found bugbear dot B at mm
and Bagle.H at mm
but failed to quarantine either one. All removal tools have failed
to remove this even the manual ones. So tow questions:
Is this just found in some file and not really infected on my machine?
Why doesn't OneCare tell you WHERE it found the file?
Thanks in advance
09 Nopember 2007 18:00Moderator
See this post for information about Quarantine Failed - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2-steve
02 Januari 2008 3:00
02 Januari 2008 18:25Moderator
See this post for information about Quarantine Failed - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1548384&SiteID=2
(Same answer as the post above yours, Andrew.)
02 Januari 2008 21:41
OK .... I HAVE THE ANSWER !!!!
Most of the times, it is in an attachment in Outlook's .PST file. After talking
to Microsoft for DAYS and WEEKS, they finally admitted on the One Care team
that "We don't know how to read that type of file!" Doh ....
So as a result, HP sent me a totally new computer since they couldn't clean the
files even with MS help.
I suggest that y'all learn to read, extract and Quarantined you own damn files. I spent
a few weeks of my life fightning this thing.
03 Januari 2008 2:12Moderator
In the post I linked to in my previous reply it explains how to determine, by looking at the support log from the logging tab in OneCare/Change Settings, where the infection was found. The message Quarantine Failed typically indicates that the infection is inside another file, in this case the .pst file, and OneCare cannot remove it without risking corruption to your mail store. It can also be that the infection is within a restore point, and this also cannot be removed. In both cases, you can manually delete either the message(s) with the infected attachment from within your .pst file or delete the restore points.
I don't know why, if the infection was within your .pst file, support could not determine this and help you remove the infection. I also don't know why HP would swap your PC for this reason as it was simply an infection within a file and could be removed manually. The OneCare message "quarantine failed" is disconcerting, but it does not mean that you have an active infection on the PC.
03 Januari 2008 13:15
Thanks, but the log truncated the file name path.
The reason they replaced it was Windows Vista kept Blue Screen of Death. They
thought it was the viri thaqt One Care reported. When I told them what you guys said,
they just shipped out a new machine.
PS... I don't think One Care is ready for Primetime yet, The messages are not clear and easily understood by non-computer people.
03 Januari 2008 18:26Moderator
Thanks for the additional information, Cliff. I'm also pleased to read about the response by HP support to your issue, having just bought an HP laptop last month and looking at one of their Quad Core's for a desktop/media PC in the near future.
And, sorry to read that the logs were less than helpful in identifying the location of the infection. :-(