Computer virus again.. Today my Laptop and PC got infected by W32/ALMAN. All I can say this virus is smart and not easy to killed It’s cannot stopped by just view in background process, in services, and startup list. This virus will make 2 master source files on %SystemRoot%\System32 first wmdrtc32.dll (40 KB) and wmdrtc32.dl_ (26,5 KB) Once it active it will injected code to any executable files and infected it. If you got message box with message “There is no disk blabla” or you cannot run any executable files you should check on your system files about those 2 d**n files.

To clean infected files use this free W32/ALMAN remover from grisoft. Download this booth files and save in one folder rmalman.exe rmalman.nt run rmalman.exe and follow instruction on there. Anyway I’m not guarantee this remover will make your computer totally clean from this virus.

In my case this remover not clean my computer totally from this virus, it keep generate .dll files again and again I do scan with ANSAV, AVG and rmalman.exe but there is nothing can help me out. I was so frustrated because much of important data in my laptop should be safe. After searching in google I found out we can check and bring back Windows genuine file by using command sfc (Windows System File Checker) so I test it run “sfc /scannow” from command prompt. It’s WORKS this virus stopped infected my computer now! Yay!

*Tips
You lost your windows CD or you install your windows from your Hard disk? you can run sfc command without CD by following this tricks.. Run regedit and find..

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ServicePackSourcePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\SourcePath

Change Value Data and point it into your i386 folder! example: the structure is D:\blabla\i386 then you should change Value Data to D:\blabla

Run “sfc /scannow” It should work if you set right Value Data on registry!

Macbook Repair Seattle

(1 votes, average: 5.00 out of 5)

 Loading ...

• Remove DeadLock Virus (W32/Tibs.DKKR)
• HOW TO: Remove Facebook Virus W32/Obfuscated.D2!genr
• Remove Sandra Dewi Bugil Virus W32/Sadra.A
• Microsoft.lnk Shortcut Virus? Worm:PIF/Starter.A
• 8 Step to Remove W32/Sality.AE

If you're new here, you may want to subscribe to my RSS feed. You may copy or publish this article to your blog or other site as long you give credit link back to this site article. Thanks for visiting my blog!

This entry was posted on Monday, June 2nd, 2008 at 4:18 PM and is filed under Computer And Internet, Miscellaneous, Tips & Trick. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.