• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Kudos0

Aartemis Trojan

I haven't seen this on any of the Norton forums, and the Norton antivirus doesn't seem to recognize it.  A general websearch brings up a bunch of sites with tools promising removal but I don't trust any of them.

On 11/16, clicked on a trojan made to look like "Windows Player Update."  Now all browsers on the machine go to an Aartemis search engine instead of the home pages listed in the settings.

I was able to manually remove 4 questionable programs installed on that fateful day.  But all browsers continue to go to aartemis.  Norton antivirus scan did not pick up anything, and the Norton virus removal tool failed to remove it.  Any ideas?

Replies

Kudos0

Re: Aartemis Trojan

I haven't seen this on any of the Norton forums, and the Norton antivirus doesn't seem to recognize it.  A general websearch brings up a bunch of sites with tools promising removal but I don't trust any of them.

On 11/16, clicked on a trojan made to look like "Windows Player Update."  Now all browsers on the machine go to an Aartemis search engine instead of the home pages listed in the settings.

I was able to manually remove 4 questionable programs installed on that fateful day.  But all browsers continue to go to aartemis.  Norton antivirus scan did not pick up anything, and the Norton virus removal tool failed to remove it.  Any ideas?

Kudos0

Re: Aartemis Trojan


counterearth wrote:

I haven't seen this on any of the Norton forums, and the Norton antivirus doesn't seem to recognize it.  A general websearch brings up a bunch of sites with tools promising removal but I don't trust any of them.

On 11/16, clicked on a trojan made to look like "Windows Player Update."  Now all browsers on the machine go to an Aartemis search engine instead of the home pages listed in the settings.

I was able to manually remove 4 questionable programs installed on that fateful day.  But all browsers continue to go to aartemis.  Norton antivirus scan did not pick up anything, and the Norton virus removal tool failed to remove it.  Any ideas?


Welcome,

First, understand that no single security program will protect you 100% of the time from 100% of the threats being released by the thousands daily. Second, you might try

http://www.malwarebytes.org/products/malwarebytes_free

or

http://superantispyware.com/

or

you can choose one of the following free sites with trained volunteer staff to assist you with cleaning your system

http://www.bleepingcomputer.com
http://forums.whatthetech.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/

Keep us posted

Dick Win7x64 SP1 current NSBU
Accepted Solution
Kudos1

Re: Aartemis Trojan

Dick,

Thanks for the suggestions, but none of the downloaded options worked.  I did not try the staffed options.  However, I did manage to find the below, and am posting in the hopes that I can save someone else a week's worth of searching to find the answer:

http://cgidoctor.com/how-to-remove-aartemis-com-aaartemis-portal-site-redirect-issue

Just in case the above site is taken down, the instructions are summarized here:

First, there were some programs installed by the trojan that actually appeared under "programs" in Control Panel; remove these.  It's easier if you sort by date, if you know the date of infection.  I found four.

Next, for ALL your browser shortcuts:

1.  right click on shortcut icons > properties (if the shortcut is in taskbar, right click the icon, then right click the application name that appears)

2:  under shortcut tab, in the target window, remove anything with aartemis in it.  Delete "http://aartemis" and everything after it.

3.  continue with specific instructions below for each app.

Firefox:

1.  Open Firefox, Go to Options > General Tab. Click Restore to Default, then click OK

2.  Click down arrow next to search engine icon and click Manage Search Engines, find Aartemis and other unwanted search engines and click remove.

3.  Open new tab in Firefox, type about:config in address barand a warning will appear in the window. Click I’ll be careful, I promise!

4.  Type Aartemis in search box, find the unwanted search app, right click on it to select Reset.  Repeat for each one.

Internet Explorer (IE 11):

1.  Launch IE and go to Tools> Manage Add-ons> Search Providers, right click on Bing \ Google \ others, press Set asdefault, and then right click Aartemis, click on Remove.

2.  Tools > Internet Options> General, in Tabs area click Tabs, in “When a new tab is opened, open:” area, select "A blank page" then click OK twice.

Chrome:

1.  Launch Chrome, then Go to Menu > Settings, then in the "On startup tab" area, select "Open the new tab pages" and click "Set pages."

2.  Find Aartemis and other unwanted search engines and click “X” to remove it.

3.  In "Appearance" area check Show Home button then click "Change" and change unwanted search engines.

4.  In the "Search" area, make sure that the content of the first pull-down is Google\Yahoo or the search engine you preffer, then click Manage Search engines. Remove Aartemis and unwanted search engine by clicking “X”

Finally, you should check all the other user accounts on your computer.

This seems to take care of the changes the trojan made to the browsers.  Remember, start by removing the programs installed by the trojan under "programs" in Control Panel.  It is easier if you sort by date and select the ones that were installed on the date of infection, if you know it.

Good Luck!

Kudos0

Re: Aartemis Trojan

Hi,

Thanks for the excellent message.

I'm sure it will work well forthose who can do-it-themselves. For the rest there are still the free staffed sites.

Stay well and surf safe

Dick Win7x64 SP1 current NSBU

Replies are locked for this thread.