Virus Bugbear.A
Thread poster: Nicolas Rick

Nicolas Rick
Local time: 12:02
English to French
+ ...
Nov 3, 2002


I am on Windows 98 and have a Bugbear.A virus - a worm - attached to JHJV.exe and zfzplfg.dll in c:/windows/system. Undeletable. And Norton found nothing since I didn\'t extend payment for the license.

Do you think I can delete safely those two files with Dos as I don\'t think they have anything to do with Windows ? Tanks for your reply.



JCEC  Identity Verified
Local time: 06:02
English to French
You have nothing to lose Nov 4, 2002

Considering the damage a worm can do, you have nothing to lose. Copy the files to a disquette just in case. Although I have never seen these names under Windows before.

If it solves the problem, I strongly advise updating your antivirus.


Clarisa Moraña  Identity Verified
Local time: 07:02
Member (2002)
English to Spanish
+ ...
Use Sophos Nov 4, 2002

I copied and pasted the following instructions

See more information at

Instructions for disinfecting W32/Bugbear-A

RMBGBEAR is a utility for disinfecting the W32/Bugbear-A worm. This worm infects most 32-bit Windows platforms (Windows 95, 98, Me, 2000 and XP). It may be dropped on Windows NT, but has not been observed to run. It can spread by copying itself across networks and by sending out infected emails which exploit MIME and IFRAME vulnerabilities. It also sends itself to printers, which print out its executable code.

Download the RMBGBEAR cleaning utility on an uninfected PC. This file is available for download as a self-extracting archive, bearsfx.exe.

Read the RMBGBEAR notes for instructions on how to use the RMBGBEAR to clean up a Bugbear infection.

Removing W32/Bugbear-A with Sophos Anti-Virus

Windows 95/98/Me

Download the W32/Bugbear-A IDE and save it to your C:\\Program files\\Sophos SWEEP folder.

For Windows 95/98, go to the Start menu and select Shut Down. Choose the option \"Restart the computer in MS-DOS mode\".

On Windows Me create a startup disk, then boot from that.

At the command prompt type:




Delete any files containing W32/Bugbear-A. Leave any others.

If you have another hard drive, run a scan on it (e.g. SWEEP D: -REMOVEF on drive Dicon_smile.gif.


Run a scan in Windows.


Clarisa Moraña


Ralf Lemster  Identity Verified
Local time: 12:02
English to German
+ ...
Makes you think twice, doesn't it? Nov 4, 2002


And Norton found nothing since I didn\'t extend payment for the license.

I know this is about the last thing you need to be told now, but still - if you consider the efforts required to clean up your system now (plus all the hassle from colleagues and/or clients who may have received infected messages or files from you), isn\'t the virus update license dead cheap?

BTW Symantec have published a removal tool for Bugbear:


Nicolas Rick
Local time: 12:02
English to French
+ ...
Thanks Nov 4, 2002

Thanks to all of you, I\'ll follow advices and extend my license for sure !

Just in case each of you need urgent assessment of contamination of your computer, I advise you to go to and have your computer checked on-line for free. This is great and that\'s how I discovered for sure I was contaminated (although I suspected it before).


Nicolas Rick
Local time: 12:02
English to French
+ ...
Virus Bugbear : end ? Nov 4, 2002

For information, I downloaded the .exe file from Symantec but it didn’t even open to track down the virus. Then I just tried the old « cut and paste » trick and you know what … It worked ! The virus disappeared and now all the applications are going fine (I tried first to just delete the contaminated files but it didn’t work as it said the said files was used by Windows). You know, the nasty thing about this virus is that it completely bugged the Norton Antivirus application.

To all of you fellow translators, JUST LISTEN TO THIS WISE MAN RALF LEMSTER : UPDATE YOUR ANTIVIRUS LICENSE ASAP whatever it costs you. Especially if you are connected to the Net. I can tell you this is a REAL hassle to get things back to normal… and a good lesson too…

My dear friends thank you for your help.



To report site rules violations or get help, contact a site moderator:

You can also contact site staff by submitting a support request »

Virus Bugbear.A

Advanced search

Déjà Vu X3
Try it, Love it

Find out why Déjà Vu is today the most flexible, customizable and user-friendly tool on the market. See the brand new features in action: *Completely redesigned user interface *Live Preview *Inline spell checking *Inline

More info »
CafeTran Espresso
You've never met a CAT tool this clever!

Translate faster & easier, using a sophisticated CAT tool built by a translator / developer. Accept jobs from clients who use SDL Trados, MemoQ, Wordfast & major CAT tools. Download and start using CafeTran Espresso -- for free

More info »

  • All of
  • Term search
  • Jobs
  • Forums
  • Multiple search