W32/Alemod, Bringe Hintergrund nicht weg. Hiiiilfe..

#1 Hallo Zusammen

Habe den W32/Alemod eingefangen :-( habe soweit alles beheben können, dank Anleitung, aber leider kann ich Smitfraud.reg (siehe unten/rot) nicht öffnen und so das Ganze abschliessen. Konnte zwar alles auf Desktop speicher, kann aber nicht ausgeführt werden. Kann mir jemand helfen. Danke viel mal. Gruss

Virus Name: W32/Alemod, W32/Alemod.dll

How do I remove this Virus?



· Make sure your AntiVirus/AntiSpyware software is up-to-date.


· Physically disconnect your computer from the internet. This step is important to prevent the virus from redownloading any bad viruses again.


· Scan your entire computer for viruses and clean anything found.

· Restart your computer into Safe Mode (abgesicherten Modus)
To start a Command Prompt

Click the START button

Click Run

Type in cmd.exe in the Open dialog box

Click OK.

· In the command prompt window, type the following:

Code:

attrib -s -r -h %systemroot%\system32\wininet.dll

Code:

ren %systemroot%\system32\wininet.dll *.bak

Code:

copy /y %systemroot%\system32\dllcache\wininet.dll %systemroot%\system32

If you get an error stating, "The system cannot find the file specified.", you will need to use a clean copy of WININET.DLL. Follow these steps:

In the command prompt window, type the following:

Code:
copy /y %systemroot%\system32\wininet.bak \wininet.tmp

Run a VirusScan on your computer. VirusScan will be able to detect and clean the \WININET.TMP file. After it has scanned and cleaned this file, follow these steps in the Command Prompt:

Code:
copy /y \wininet.tmp %systemroot%\system32\wininet.dll

· Restart your computer.

· Run a full Virus Scan to verify your system is clean.

· This virus makes changes to some of your system settings. To undo these changes, please download and save the following files to your desktop.

Download smitfraud.reg
Download DelDomains.inf
After downloading these files,


RIGHT-Click on the DelDomains.inf file and choose Install. There will be no prompt or confirmation for this command.

Double-Click on the smitfraud.reg file and confirm you want to open and merge the registry entries into the registry database.


· Restart your computer one more time for good measure. You may reconnect your Internet connection.

#2 arbeite das bitte ab und poste alle Logs
http://board.protecus.de/t23188.htm
__________
MfG Sabina

rund um die PC-Sicherheit