Comments on: Braviax

By: Craig

Craig — Fri, 25 Sep 2009 22:30:51 +0000

I’m running Windows Vista, and the braviax.exe file was in my User/AppData/Roaming folder and nowhere else. I checked my beep and ntfs files, and they hadn’t been modified. I don’t know if Vista’s setup is different enough that it kept it from spreading the way it normally would, or if I just caught it before it did too much damage, or if it was just dumb luck, but stopping the braviax process with Task Manager and deleting the file from my AppData folder and the braviax entry from regedit seems to have worked. The cru629 file was nowhere to be found.

By: fallen

fallen — Tue, 15 Sep 2009 13:19:37 +0000

so looks like I removed it pretty much manually .. so its not impossbile
this forum helped a whole lot though

Hard to believe that ZA was fooled by braviax
Now all I got to do is allow/deny all programs access, coz seems like braviax completely corrupted ZA’s program permission list.

The only help I got was SysMech8′s dumbass AV program that deleted braviax.exe

At one moment braviax looked like a damn hydra – you chop off one head and it grows back. Get that chainsaw and CHOP CHOP CHOP all at once … all dats dlls exes startup items etc.

By: Mojo

Mojo — Mon, 14 Sep 2009 21:05:26 +0000

@TMALATESTA
Perfect. Spy Doctor took care of it – Just go to Safe mode – Follow the manual instructinos everyone is posting but Prior to doing anything else Download the spy doctor and Run it in safe mode. It says not to but do it anyway. Then reboot. All is Perfect. BUT – It will be SLOWWWWW since Spy Doctor is like a 1000lbs elephant in your computer weighing everything down. I just uninstall spydoctor. Anyhow, this is a scary one and No idea how I got it but it won’t happen again.

Thanks

By: zzzaney

zzzaney — Thu, 10 Sep 2009 02:26:28 +0000

THIS WORKED PERFECT FOR ME Marcus! Thank you so much! This was the 5th time the kids infected me with Braviax and this was the FIRST time i didn't have to reformat my harddrive. WOO-HOO @Marcus

By: taylocan

taylocan — Sat, 05 Sep 2009 14:30:17 +0000

to kill braviax.exe :

1-shut down internet.
2-open task manager
3-end braviax.exe and its creator sys32_nov.exe
4-than open windows/system32/
5-search find and delete with unlocker these found files sys32_nov.exe and braviax.exe in system32 folder..it means you survived braviax.exe))

By: admin

admin — Fri, 04 Sep 2009 14:39:15 +0000

Alvin : Typically, Braviax is not coming alone. It is rare to get single trojan nowadays.
BitDefender is ok. I prefer NOD32 (antivirus) and Spyware Doctor (antispyware) for regular protection. AVG is ok antivirus from free ones, but it does not have proper rootkit protection and they are getting more popular now :/

By: Alvin

Alvin — Fri, 04 Sep 2009 14:31:04 +0000

Just my 2 cents: Did Marcus’ method and Gary’s as well. But in the end I used SUPERAntiSpyware Free Edition, did an update, and ran the quick scan. It found stuff in places that were not mentioned anywhere. It quarantined the offending files and I removed them and all is well again. Does anyone know of a good antivirus/anti-this-kind-of-nasty-trojan package? How’s BitDefender?

By: Michelle

Michelle — Fri, 04 Sep 2009 05:18:32 +0000

Oh My wonderful Marcus. I think I’m in Love with you. Thank you so very much. While I was in there I found antivirus pro 2010 and deleted those values too. I hit “find next” for each entry 3 times until they were all gone. I ran my cleaners in safe mode as well. You are my hero.

By: Scooby

Scooby — Fri, 04 Sep 2009 03:14:56 +0000

Hey everyone, listen up for a quick & painless way to get rid of braviax. As others have said, the idea is to delete the following files:

C:\windows\braviax.exe
C:\windows\cru629.dat
C:\windows\system32\braviax.exe
C:\windows\system32\cru629.dat
C:\windows\system32\drivers\beep.sys

BUT YOU HAVE TO KILL THE RUNNING BRAVIAX PROCESS FIRST! If you don’t, it’ll just re-populate itself on your next boot up. So here’s how you kill it.

1. Open up Notepad and type some garbage. Do not save. Leave it open.
2. Go to Start > Turn Off Computer > Restart

(windows will kill all processes–including braviax–but it’ll stop when it gets to Notepad. It’ll say something about “do you want to save this file”. Hit cancel to return to Windows.

Ok, NOW you can open up Explorer & delete all the files listed above. When you’re done, restart your computer (discard the file you started in Notebook). And voila, on your next boot, braviax should be gone. Now is when you run all your anti virus programs to really scrub your system. I recommend Spybot Search & Destroy (It’s FREE. Google it) as well as Lavasoft AdAware (another FREE one).

Btw, remember the trick about shutting down w/ Notebook open. It comes in handy for any pesky process you can’t kill regularly.

By: admin

admin — Thu, 03 Sep 2009 16:04:29 +0000

Michael: Use marcus way and check if spyware doctor detects anything afterwards (before/after reboot). If yes, you can go with Spyware Doctor to finalise its removal.

By: Michael

Michael — Thu, 03 Sep 2009 13:30:23 +0000

I hope all malware writers get cancer. Stupid braviax won’t be removed. I tried using SD fix and combo fix to get rid of it, but it reappeared on reboot. I tried using Marcus’s way by removing files during safe mode, but could not find many of the files in c:\windows, (view hidden files on). Used malwarebytes as well, but it reappears on restart.

Any other solutions?

Thanks in advance.

By: admin

admin — Thu, 03 Sep 2009 08:09:04 +0000

Mike: startup menu might link to missing files. Also, are you showing system files as well, or only hidden ones? If the file exists, but you can not see it with system&hidden file visibility turned on, then a rootkit is protecting it from beeing seen = you should scan your PC with anti-spyware.

By: Mike

Mike — Wed, 02 Sep 2009 22:12:58 +0000

According to my startup menu I have a braviax.exe in my system32 file but when I navigate there in exporer I can’t find it. I have already made sure hidden files are shown. Any thoughts?

By: Tom

Tom — Wed, 02 Sep 2009 13:09:36 +0000

Hi all

Using the Marcus + Orest + finding ALL files/registry entries did the trick.

Thanks.

By: admin

admin — Tue, 01 Sep 2009 08:28:47 +0000

Andy : you are wrong. Your PC will be fixed if braviax is the initial infection only. This is not always the case. Sometimes trojans can be for a week without showing signs till it gets messages from botnet masters.

By: Andy

Andy — Tue, 01 Sep 2009 07:56:45 +0000

@Eric Thanks Eric. I noticed the bastard thing today and after a bunch of unsuccessful attempts I did a system restore for the first time ever back to 10pm last night. After restore no trace of the little bastard. If you can remember the day you noticed that f%^%$ng red circle in your tray, and do a system restore to the day before, it should be all good.

By: Nuno

Nuno — Mon, 31 Aug 2009 23:15:48 +0000

“Then run regedit and delete all values including Braviax or cru629.”

I’m terrible with pc’s.. Can u tell me how to do that? thanks

By: Paul

Paul — Sun, 30 Aug 2009 13:16:38 +0000

@Jonny
Johnny – if you don’t mind the asking or it’s not too personal, what website do you think they got into you from?

By: Viswanath

Viswanath — Sun, 30 Aug 2009 12:58:08 +0000

Great Marcus and thanks.. finally my system is free from braviax.

By: Steve

Steve — Fri, 28 Aug 2009 15:45:06 +0000

@admin I have been virus free for a month now. thanks though.