[ninjafar]

Hi there
Im in need of some held, sunday my system was infected, Norton showed a log saying that alemdo (trojan horse) was detected, i saw the icons from the virus on my desktop and in the lower left corner of the screen. I read on the net about the virus, found some new files in vthe folder \windows\system32 amongst them was oleext.dll, a couple of exe files - i deletede some of those and restarted - and then the trouble began. When I start up my systems works ok for a couple of seconds, then i slows completely down. The only program i can open this when i press ctrl-alt-del, then the runnigs processes is listed as usual and in can manage to start up a cmd-promt which works - but thats about it - no programs are running properly. This is written from another computer!

Should i get hold of the windows cd an reinstall? should i format the C:drive (I have 3 partitions and i hope to keep all the data on g: and f: drives)

Hope someone can help, you all really seem quite skilled
greets Matt/cph

[Advertisements]

Welcome ninjafar to Geeks to Go!

Let's see what we can do.

We'll need to transport some files from the computer you are now using, to your infected computer.

Download smitRem.exe and save the file to your desktop.
Right click on the file and extract it to it's own folder on the desktop.
So you'll get a new folder called smitrem on your desktop.
I want you to put that folder on cd, floppy or usb-stick.

On your infected computer, boot again in safe mode and open your task manager again.
Now insert the cd, floppy or usb-stick where you saved the smitrem folder in your infected computer.

In your Task Manager, click 'applications' (first tab).
Click the New Task button.
Cick browse.

Now browse to the drive where your floppy, usb-stick or cd is present (could be A or D or E or F.. you'll see..)
Search for that smitrem folder.
Right click on the smitrem folder and choose: Copy

Now browse again via Task Manager to My Documents or Program Files.
Right click somewhere in there, right click and choose: Paste
Now open the smitrem folder you just copied and pasted and click the file: RunThis.bat
Then click open.
In the window where it says 'Create new task', click OK.

Normally, you'll have to drag the different windows you'll see to left or to right, because normally they will open on top of each other and you wont see the command window the tool starts that is under it.
You'll see a blue window now.
Follow the prompts on screen.
Wait for the tool to complete.

When done, in Task Manager, click 'shut down' from the menu on top and click restart. Your computer will reboot now.
Reboot to normal mode and post a Hijackthis log in your next reply.

[g2i2r4]

Welcome ninjafar to Geeks to Go!

Let's see what we can do.

We'll need to transport some files from the computer you are now using, to your infected computer.

Download smitRem.exe and save the file to your desktop.
Right click on the file and extract it to it's own folder on the desktop.
So you'll get a new folder called smitrem on your desktop.
I want you to put that folder on cd, floppy or usb-stick.

On your infected computer, boot again in safe mode and open your task manager again.
Now insert the cd, floppy or usb-stick where you saved the smitrem folder in your infected computer.

In your Task Manager, click 'applications' (first tab).
Click the New Task button.
Cick browse.

Now browse to the drive where your floppy, usb-stick or cd is present (could be A or D or E or F.. you'll see..)
Search for that smitrem folder.
Right click on the smitrem folder and choose: Copy

Now browse again via Task Manager to My Documents or Program Files.
Right click somewhere in there, right click and choose: Paste
Now open the smitrem folder you just copied and pasted and click the file: RunThis.bat
Then click open.
In the window where it says 'Create new task', click OK.

Normally, you'll have to drag the different windows you'll see to left or to right, because normally they will open on top of each other and you wont see the command window the tool starts that is under it.
You'll see a blue window now.
Follow the prompts on screen.
Wait for the tool to complete.

When done, in Task Manager, click 'shut down' from the menu on top and click restart. Your computer will reboot now.
Reboot to normal mode and post a Hijackthis log in your next reply.