Wetlook World Forum

You've been lucky, I've had computers from custmers, which had a couple of 100 files infected!

Generic Artemis or variant in 4 different .dll files --> Its is allways good, if you know the filenames, then you can eliminate them yourself.

boot in protected mode, search for the files and delete them. be aware though, that they may be write-protected. If so, you'd have to change the file-settings.

Check the following folders for files with similar names:

all temp folders, incl. temp internet files

your windows folder (mostly C:\windows)

the windows-subfolders \system and \system32 (and all of their subfolders)

Rename the suspicious files (see below) and move then to a new empty folder named 'suspicious' (or any name you like) and remember for each file, where it came from (for example by putting all the files from \system32 in c:\suspicious\system32)

Restart the system.  If you would have moved something you shouldn't have, the program needing the file will ask for it and you can move it back. If all programs work well, you can delete the files.

Mostly the name is composed of randomly choosen characters. Programmmers tend to give their files a name from which they can recognise themselves, what the files are for.

So every filename with randomly choosen characters is suspicious.

Good luck!

Hobie