I-worm.bagle.zip.gen

[sealevel]

Been a fan for years and now I need a bit of help. Malwarebytes has been warning me about I-worm.bagle.zip.gen. I click delete, but after a couple of hours or so it is back again. I can not find anything on this apparently new variant of an old nasty. I am guessing it is using SMTP and maybe even ports 6777 and 8866, so added and extra layer of TCP out going protection for those ports. Blocked them. I'm 90% certain the worm came from a relative with whom I have been trying to convince to take security more seriously for a long time now. UGH...Please help me clean this out. Where might it be lurking that Anti-Malware Home (Premium) can't completely get rid of it?

Thank you

[TwinHeadedEagle]

Hello and

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version. 
 

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
  
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[sealevel]

Thank you. I am uncomfortable posting all of that online. Can I PM you the log?

[TwinHeadedEagle]

Yes, of course.

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!