How to remove Win32.Bagle.{C-E}@mm from my personal computer?

[WILTON]

My uncle has gifted me a new personal computer. This computer has the following configuration.
Operating System: Windows vista.
Hard disk: SATA 250 GB Hard disk.
Processor: AMD Athlon processor
Graphic card: ATI Radeon HD 4350 (512 MB).
Memory: 2 giga bytes of random access memory (RAM).
I was using internet and started to receive mail from other email. Once I got the mail from unknown user and downloaded the attachment with it, after that my personal computer is giving me problem. When I scanned the system it showed me a message that “Win32.Bagle.{C-E}@mm virus is detected”. I have no idea how to delete this virus.

[Steve123]

Win32.Bagle.{C-E}@mm which is detected on your personal computer is kind of virus/worm. Win32.Bagle.{C-E}@mm replicates itself again and again makes your system slow. Basically this virus Win32.Bagle.{C-E}@mm spreads through email from one user to another so be careful before downloading attachment sent from unknown user. Download macafee antivirus and this will solve your problem.

[Shen]

The virus named Win32.Bagle.{C-E}@mm can be removed from your system by using antivirus software, but you must be careful before downloading any attachment. Follow these steps to prevent yourself from such virus problems. Enable your firewall settings. Update your antivirus software. Scan your system at regular interval. Avoid using pirated software.

[Big Fish]

If you are suffering with Win32.Bagle.{C-E}@mm then you will be having the following registry key in your registry window.
HKCU\Software\DateTime2\port with value "2745"
HKCU\Software\DateTime2\frun with value "1"
HKCU\Software\DateTime2\uid with random value
And the following files will be present on your system.
C:\Windows\System\readme.exe, 15872 bytes
C:\Windows\System\readme.exeopen, 15994 bytes
C:\Windows\System\doc.exe, 1536 bytes
C:\Windows\System\onde.exe, 18944 bytes
So if you find these files on your system, then delete those files from your system.

[Zachary]

Win32.Bagle.{C-E}@mm virus normally arrives through emails. The email will have the following format.
From: any unknown user id
Subject: Subject will be like this (Registration confirmation, From Hair-cutter, You really love me? Or any of the title which attracts the user attention.)
Body:
The body will contain message which will promote user to download attachment.

Once the user downloaded the attachment and opened the file then will get execute and drops four files in "C:\Windows\System" for following purpose.
Readme.exe for regestring itself so that virus can get executed every time system restarts. Doc.exe for injecting the explorer.exe in address space. Onde.exe is the main component of the virus.
Win32.Bagle.{C-E}@mm virus will do the following changes in your registry.
HKCU\Software\DateTime4, with the only subkey "frun = 1".
HKCU\Software\Microsoft\Windows\CurrentVersion\Run, with the subkey "rate.exe = C:\Windows\System\i1ru74n4.exe"

[Snake08]

Delete following files from your computer.
doc.exe, readme.exe, onde.exe, readme.exe from window system files and then delete the following registry keys. From your registry windows.
"gouday.exe = C:\Windows\System\readme.exe" under "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run".
"frun=1", "port=2745", "uid=[random value]" under "HKEY_CURRENT_USER\Software\DateTime2".
After deleting files and registry key scan your system to conform that the virus is deleted.