Artemis!1498db62cea7c [Solved]

Hi tortoise,

You can delete jre-7u17-w jph.exe

The 2 desktop.ini are normally hidden files. We unhid them earlier, so we will reverse that.

Open windows explorer, clickorganize, folder options, click the
view tab

• check "Do not show hidden files and folders"
• check "Hide protecting operating system files" box

Click apply, click ok



Now we'll take care of combofix. If you still have the renamed copy of combofix (jgh.exe) on your desktop please delete it. Download a new copy from HERE . It must be saved to the desktop. No need to rename it this time. Do not run it, we only need t for the uninstall routine.

Click the Start button. Copy and paste the following line into the search box and click OK (don't miss the first " mark or it won't work)

"%userprofile%\desktop\combofix.exe" /Uninstall

Everthing go ok?

Everything else is good but Combofix. This is what I am doing with it. I click the start buttom on the bottom left side, I go to search, and I see 2 options. For files or folders and for people I click files and folders. A box appears and I put in the top right box, "%userprofile%\desktop\combofix.exe" /Uninstall but it says it can't find it. It does find ComboFix.exe when I type that into it.

Hi tortoise,

There should be a small search box at the left hand bottom when you click the start button. Copy and paste the line into that box.
📎untitled.png


If the box is not there do this instead.

Press the Windows key and the R key at the same tme. A run box will open. Copy and paste the line into the small white field and click ok.

Had to use the window keys but it worked. ComboFix is gone. So I now have a clean computer?

Hi tortoise, As best as I can tell, yes your machine is clean.

I want to thank you for the amazing job you have done. Now it on to reading and doing my protections. Which I know I will screw up.

Hi tortoise, You are very welcome. Take care, keep safe.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.