atdmt

banjo · 16-10-2009, 15:52

Can someone please tell me how to get rid of this, atdmt malware as I have trying to get rid of it for weeks, I have searched google for remedies and used spyware doctor, Adaware, AVG and have been through the registry deleting all signs of this pest but it still keeps coming back oh and I have also blocked it using Mozilla, Thanks.

**Kymmy** · 16-10-2009, 15:54

http://forums.techguy.org/malware-re...e-removal.html

banjo · 16-10-2009, 17:29

Quote:

Originally Posted by Kymmy

http://forums.techguy.org/malware-re...e-removal.html

Thank you for your help but I have already tried this and cannot find a folder called "atlassolutions"

I have been through the registry and deleted all the atdmt references I can find, I have even done this in safe mode, good of you to help

NeilH · 16-10-2009, 20:03

Try downloading and using Spybot Search And Destroy.

And if it manages to get back time and time again then its starting up with the pc.

Click start/run and type in msconfig and have a look at the startup programs and see if their is any reference to it there.

banjo · 17-10-2009, 09:29

Thank you for trying to help but this pesky critter has won and I can't get rid of it

Jon T · 17-10-2009, 09:38

Tried SuperAntiSpyware, not saying it'll get rid of it but it's worth a try.

banjo · 17-10-2009, 09:43

Quote:

Originally Posted by Jon T

Tried SuperAntiSpyware, not saying it'll get rid of it but it's worth a try.

Thank you but yes

DaiNasty · 17-10-2009, 11:33

If it's coming back then possibly it's a 'double act'. Some malware runs a second watcher process that restores the trojan if it's deleted. That could also be what is 'stealthing' the folder or processes.

One thing I try sometimes is to pull the hard disk and mount it as a secondary/slave disk in another pc. That way the process is not running and sometimes you can see hidden stuff and delete it that way.

banjo · 17-10-2009, 11:47

Quote:

Originally Posted by DaiNasty

If it's coming back then possibly it's a 'double act'. Some malware runs a second watcher process that restores the trojan if it's deleted. That could also be what is 'stealthing' the folder or processes.

One thing I try sometimes is to pull the hard disk and mount it as a secondary/slave disk in another pc. That way the process is not running and sometimes you can see hidden stuff and delete it that way.

Thank you for your help, I have been trying to get rid of this pest for 2 weeks and have lost the will to live as far as this horrible thing is concerned, it is on my laptop and I don't have a converter to attach it to my desktop.

I wonder how many of you also have this problem ?

Jon T · 17-10-2009, 12:24

System restore folders not being scanned?

banjo · 17-10-2009, 21:48

Quote:

Originally Posted by Jon T

System restore folders not being scanned?

Thank you for that I will delete my restore folder but I think that AVG would have found it if the problem was there.

banjo · 18-10-2009, 13:52

I have deleted all my cookies, also my restore points and still this "thing" plagues me !

Why does this thread not show up in "Latest Discussion Topics" ?

Jon T · 18-10-2009, 14:02

Quote:

Originally Posted by banjo

I have deleted all my cookies, also my restore points and still this "thing" plagues me !

Why does this thread not show up in "Latest Discussion Topics" ?

It does, try forcing a refresh(ctrl + F5)

As to your problem, you seem to be edging ever closer to a backup and re-install. I do this if the time spent trying to solve the problem looks like it going to far exceed the time taken for a re-install.

banjo · 18-10-2009, 16:35

would anyone have an idea where I got this from ?

Thank you Jon T for your reply.

I still cannot see this in "Latest Discussion Topics" even with a refresh ?

NeilH · 18-10-2009, 20:51

banjo.. Google for a program called ICESWORD and run it. It will tell you what is hiding on your machine even if its smeaky enuff to hook itself to another port. You can then terminate the process and begin with getting rid of it. Check the registry and the startup progs because it sounds like it is nesting somewhere and starting when you reboot or kill it. A lot of stealth virii and trojans force a restart on terminate, but this prog shud and will keep it terminated whilst you root it out.