Generic!Artemis(Trojan)

[nikon3ab]

Hi there I'm new and need some direction to take

Everytime I run McAfee I get the same results

Scan results: 1 Item Detected
Detection Name: Generic!Artemis(Trojan)
File: C:\ProgramFiles|CommonFiles\PureNetworksShared\Platform\Cfirewallcom.dll
Status: cannot be removed

It seem that since I installed Network Magic, I have picked up this bug,
before that my PC was clean

Any suggestions, would removing the Network Magic program help?

[nikon3ab]

I have done the READ & RUN ME FIRST, Malware removal Guide
and attached my Log Files.

After running McAfee again, I get the same results, infected with
one Trojan, Generic!Artemis

[dr.moriarty]

Welcome to MajorGeeks.


Artemis is a relatively new heuristic detection method by McAfee. You can read about it:

Anti-Virus Comparative Preview Report: McAfee Artemis

Since you have Pure Networks installed:
http://forums.purenetworks.com/showp...9&postcount=20

*This may be a false detection...I am currently reviewing your logs and will get back to you with a set of instructions as soon as possible. Our queue is working the oldest threads first.

Thanks for your patience.
dr.m

[nikon3ab]

Thanks for you reply,
I did a system restore to about a month ago before all this trouble started,
and that seemed to fix the problem, Mcafee has quarantined the virus and
now runs virus detection free.

[dr.moriarty]

Since you have done a System Restore and are satisifed with your machine's performance --- let's do some final cleanup:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significan amount of resources ( except a little disk space ) until you run a scan.
2. If we had you use ComboFix, uninstall ComboFix (=This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /u
     • Notes: The space between the combofix" and the /u, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
   • Delete the C:\combofix folder from combofix (if it exists)
3. If we had you run Avenger, you can delete all files related to Avenger now.
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
7. Go to add/remove programs and uninstall HijackThis.
8. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
9. If you are running Vista, Windows XP or Windows ME, do the below:
   • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
10. After doing the above, you should work thru the below link:
    • How to Protect yourself from malware

Safe surfing!