cancel
Showing results for 
Search instead for 
Did you mean: 
aliitoo
Level 7

Generic!Artemis GONE!!! (finally)

I read many posts regarding the Generic!Artemis virus and everybody's inability to remove it. I also experienced the same issue. The offending file (wreboot.exe) showed up on my "S" drive which most of the free malware and spyware programs did not read. I assume they would not have removed the file just like McAfee was unable to remove it which of course is another issue that THOROUGHLY pisses me off!
I did a few things that finally worked. I offer the things that I did only as ADVICE. I'm not an expert in any way! I'm sure those that have a better understanding of computers and virus' will caution against what I did. However, it worked.
About the only thing of value that McAfee did was ID the offending file and it's location. When I went to that file in Explorer and tried to select it with the mouse I was advised I did not have permission to do that. McAfee would kick in and advise that the file was trying to start up. I'd select delete it or whatever the choice was and would be advised I was unable to do so. So, there was no way I could simply delete the file as I wasn't able to even select it.
So, I thought I'd disable the file and/or the program. I went through regedit and deleted any reference to wreboot.exe. I went to the directory where that file resided and found several "bat" and text files with that file mentioned and removed any reference within those files to wreboot.exe. I was still unable to remove the actual file.
Several sources advised to start Windows in "Safe Mode with Networking" and then run the spyware programs which I did. Just for grins I opened Explorer and went to the directory with the dirty file. I not only was able to select it but I was able to delete it. I then ran all the spyware, malware and McAfee programs. Generic!Artemis was GONE! I rebooted and again ran all those programs and achieved the same results.
So, will this work for you or was this even the right thing to do? I don't know. I just know that this worked for me. I don't even know if "wreboot.exe" is a legitimate file or the virus itself. My computer is running fine. It reboots fine. The only thing I know is that there's no mention of the virus anymore.
0 Kudos
3 Replies
Peacekeeper
Level 20

RE: Generic!Artemis GONE!!! (finally)

The latest update of Mcafee virusscan has a new feature called active Protection. It uses Artemis which can recognise new viruses. All as far as I know get called Generic Artemis till the dats get updated.

The file you mention wreboot.exe is mentioned somewhere as window system file though you did not mention the folder where is was found so i would have asked for a check as below

Send the file to Avert for analysis:
http://vil.nai.com/vil/submit-sample.aspx
or
https://www.webimmune.net/default.asp
or
Email file to: virus_research@avertlabs.com
When submitting samples via E-mail all samples must be packaged in a .ZIP file. When creating this .ZIP file, it is important to understand that the .ZIP can be no more than 3 megabytes in size and can contain no more than 30 files. Additionally, any .ZIP file created must be password-protected using the password "infected" (minus the ""). Failure to follow these guidelines will cause your submission to be rejected.
0 Kudos
aliitoo
Level 7

RE: Generic!Artemis GONE!!! (finally)

Thanks, Tony. I was just going on the programs response to Generic!Artemise and ID'ing it as a virus. Seems to be a lot of confusion over this isssue....
0 Kudos
Peacekeeper
Level 20

RE: Generic!Artemis GONE!!! (finally)

help file needs updating I assume will chase them up later
0 Kudos