Avast WEBforum

Other => Viruses and worms => Topic started by: WELSHYx on November 27, 2010, 03:28:31 PM

Title: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: WELSHYx on November 27, 2010, 03:28:31 PM
Shut down my computer last night and upon turning the computer back on I had more than 50 virus notifications !

Avast has identified them as:

ExeDropper-gen (Trojan)

And

Win32 Rammit (Worm)

So far i have only moved the viruses to the chest

Yet Avast will not allow me to process a certain file disallowing me to move anything else
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: Pondus on November 27, 2010, 03:32:59 PM
Try this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always update  the program before you scan
click the remove selected  button to quarantine anything found
please post the scan log here if anything is found
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: essexboy on November 27, 2010, 03:34:51 PM
Malwarebytes will not work against this as it infects HTML files

Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download
 
It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: WELSHYx on November 27, 2010, 03:39:24 PM
Okay I have downloaded Dr.Web will post the log ASAP
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: Pondus on November 27, 2010, 03:42:39 PM
Quote
Malwarebytes will not work against this as it infects HTML files
true, but just in case there is something else in there........
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: WELSHYx on November 27, 2010, 05:40:03 PM
Log File is too large

Still getting multiple notifications of the Win 32 Rammit worm & Trojan
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: WELSHYx on November 27, 2010, 05:42:41 PM
Win32:Ramnit-F

The name of the worm...
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: Left123 on November 27, 2010, 06:04:47 PM
upload the log at www.mediafire.com and post link here
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: essexboy on November 27, 2010, 06:26:57 PM
Dependant on how deeply entrenched it is you may well be looking at a reformat here - so back up your data just in case - but not exe, scr, HTM,HTML
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: WELSHYx on November 27, 2010, 11:37:43 PM
I gave up and reformatted yet forgot to backup data thankfully the computers only 3 weeks old so I didn't have that much to lose..

Any ideas where I might have picked it up from and what I can do to protect from it in the future 
Title: Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
Post by: Pondus on November 27, 2010, 11:42:51 PM
You can red about the different versions here ( click the name fore detailed info )
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Search.aspx?query=Win32/Ramnit