atmclk.exe please HELP

  • Thread starter Thread starter Goldenshuttle
  • Start date Start date
G

Goldenshuttle

Plz guys, the atmclk.exe hit my system. Now even all drives except c:
drive still there. I also cannot go online 2 get help, or download
something. so plz give me advice . As U see I cannot run anything since
no floppy or CD can be run. If U have a way that I can do it thru the
safe mood or Dos prompt, I will be grateful
 
Goldenshuttle said:
Plz guys, the atmclk.exe hit my system. Now even all drives except c:
drive still there. I also cannot go online 2 get help, or download
something. so plz give me advice . As U see I cannot run anything
since no floppy or CD can be run. If U have a way that I can do it
thru the safe mood or Dos prompt, I will be grateful
Click to expand...

I will be grateful if you type in English, thanks. No "plz", no "U", no
"2". This is not txt messaging or a chat room.

Google is your friend:
http://www.daniweb.com/techtalkforums/thread46936.html
 
Beauregard said:
Goldenshuttle wrote:
Click to expand...
I will be grateful if you type in English, thanks. No "plz", no "U",
no "2". This is not txt messaging or a chat room.
Click to expand...

Some of us continue to use complete words and sentences even for text
messaging and in chat rooms.

I haven't the energy to decipher what passes for conversation these
days.
Google is your friend:
http://www.daniweb.com/techtalkforums/thread46936.html
Click to expand...

One wonders if the "chat generation" will retain the ability to read.

--
Rhonda Lea Kirk

Insisting on perfect safety is for people
without the balls to live in the real world.
Mary Shafer Iliff
 
I ask 4 help and some guys start lecturing about using english ?! We
are in times where all values are decaying. I am an old timer myself.
now I see school teenagers show in the streets very much like hookers,
and wish that did not live this long to see the new generations show
themselves so cheap and exposed....anyhow..lets not deviate our
subject...if anyone have advice about teh computer, plz help....thanks
again 4 reading.
 
Goldenshuttle said:
I ask 4 help and some guys start lecturing about using english ?!
Click to expand...

With your broken chat-room-speak, your question is hard to read. Why is
this a problem?

anyhow..lets not deviate our subject...if anyone have advice about teh
computer, plz help....thanks again 4 reading.
Click to expand...

So, did you look at the link I gave you?

Please do not top-post. Thanks for your consideration.

That one....^
 
I ask 4 help and some guys start lecturing about using english ?!
We are in times where all values are decaying. I am an old timer
myself. now I see school teenagers show in the streets very much
like hookers, and wish that did not live this long to see the new
generations show themselves so cheap and exposed....anyhow..lets
not deviate our subject...if anyone have advice about teh
computer, plz help....thanks again 4 reading.
Click to expand...

no dude LOLz..if u keep writin like that no 1 can help u......sorri!!

<http://www.guidenet.net/resources/wanker.html>
 
The link you gave seems useful. but, I am using another computer to
look at it on the web. even when I downloaded the given cure, I am
unable to use it on the infected system since the (atmlk.exe) somehow
cancelled my CD drive from the system, and cancleeed my web access. The
only thing left is a winXP running on the C drive.....

btw I hope you find my English acceptable now

Regards.
 
From: "Goldenshuttle" <[email protected]>

| Plz guys, the atmclk.exe hit my system. Now even all drives except c:
| drive still there. I also cannot go online 2 get help, or download
| something. so plz give me advice . As U see I cannot run anything since
| no floppy or CD can be run. If U have a way that I can do it thru the
| safe mood or Dos prompt, I will be grateful

As others have noted, please don't use "broken chat-room-speak". To help sove a problem it
is best to use proper English and expressed in the *best* way possible.

Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0 Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *
 
Goldenshuttle said:
I ask 4 help and some guys start lecturing about using english ?! We
are in times where all values are decaying. I am an old timer myself.
now I see school teenagers show in the streets very much like hookers,
and wish that did not live this long to see the new generations show
themselves so cheap and exposed....anyhow..lets not deviate our
subject...if anyone have advice about teh computer, plz help....thanks
again 4 reading.
Click to expand...

Some people read the newsgroups through language translator software.
English to German for example - not txtmsgspk 2 German. :)
 
Goldenshuttle said:
The link you gave seems useful. but, I am using another computer to
look at it on the web. even when I downloaded the given cure, I am
unable to use it on the infected system since the (atmlk.exe) somehow
cancelled my CD drive from the system, and cancleeed my web access. The
only thing left is a winXP running on the C drive.....

btw I hope you find my English acceptable now

Regards.
Click to expand...

Try booting into safe-mode with networking.(tap F8 before windows loads)
max
--
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
Keeping Windows Clean: http://home.neo.rr.com/manna4u/keepingclean.html
Windows Help: http://home.neo.rr.com/manna4u/tools.html
Specific Fixes: http://home.neo.rr.com/manna4u/fixes.html
Forums for HiJackThis Logs:
http://home.neo.rr.com/manna4u/forums_for_hijackthis_logs.html
To reply by e-mail change nomail.afraid.org to gmail.com
nomail.afraid.org is setup specifically for use in USENET
feel free to use it yourself.
 
OK guys...God bless U all for these many suggestions.
Now I just borrowed a 2.5-to-3.5 hard disk adaptor box. I am gonna
connect the infected laptop hard drive as a secondary drive into a
healthy desktop.
From there I can try 2 clean or format it. on the desktop, I have
Click to expand...
AVG(free), Zone Alarm, and also I have the smitfraud downloaded....
will keep U posted of what happened tomorow...

all the best
 
From: "Goldenshuttle" <[email protected]>

| OK guys...God bless U all for these many suggestions.
| Now I just borrowed a 2.5-to-3.5 hard disk adaptor box. I am gonna
| connect the infected laptop hard drive as a secondary drive into a
| healthy desktop.| AVG(free), Zone Alarm, and also I have the smitfraud downloaded....
| will keep U posted of what happened tomorow...
|
| all the best
|


* * * WARNING ! * * *

Realize that using a surrugate to clean infectors means only the files will be cleaned from
the drive and it will act upon the registry of the surrogate platform.

ATMCLK.EXE is a Trojan that affects the HKLM and HKCU branches of the Registry of the
affected PC and using a surrogate will NOT fix changes to the affected Registry.

Please do NOT use such specialty tools in a surrogate mode. Only an AV scanner.

You need to execute the specialty tools running under the affected operating system using
the affected user account.
 
Back
Top