Author Topic: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)  (Read 6482 times)

0 Members and 1 Guest are viewing this topic.

WELSHYx

  • Guest
Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« on: November 27, 2010, 03:28:31 PM »
Shut down my computer last night and upon turning the computer back on I had more than 50 virus notifications !

Avast has identified them as:

ExeDropper-gen (Trojan)

And

Win32 Rammit (Worm)

So far i have only moved the viruses to the chest

Yet Avast will not allow me to process a certain file disallowing me to move anything else

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #1 on: November 27, 2010, 03:32:59 PM »
Try this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always update the program before you scan
click the remove selected button to quarantine anything found
please post the scan log here if anything is found

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #2 on: November 27, 2010, 03:34:51 PM »
Malwarebytes will not work against this as it infects HTML files

Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download
 
It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that

WELSHYx

  • Guest
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #3 on: November 27, 2010, 03:39:24 PM »
Okay I have downloaded Dr.Web will post the log ASAP

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #4 on: November 27, 2010, 03:42:39 PM »
Quote
Malwarebytes will not work against this as it infects HTML files
true, but just in case there is something else in there........

WELSHYx

  • Guest
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #5 on: November 27, 2010, 05:40:03 PM »
Log File is too large

Still getting multiple notifications of the Win 32 Rammit worm & Trojan
« Last Edit: November 27, 2010, 05:44:05 PM by WELSHYx »

WELSHYx

  • Guest
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #6 on: November 27, 2010, 05:42:41 PM »
Win32:Ramnit-F

The name of the worm...

Offline Left123

  • There Is No Patch For Human Stupidity.
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1048
  • Proud Community Member&Helper.
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #7 on: November 27, 2010, 06:04:47 PM »
upload the log at www.mediafire.com and post link here
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #8 on: November 27, 2010, 06:26:57 PM »
Dependant on how deeply entrenched it is you may well be looking at a reformat here - so back up your data just in case - but not exe, scr, HTM,HTML

WELSHYx

  • Guest
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #9 on: November 27, 2010, 11:37:43 PM »
I gave up and reformatted yet forgot to backup data thankfully the computers only 3 weeks old so I didn't have that much to lose..

Any ideas where I might have picked it up from and what I can do to protect from it in the future 

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #10 on: November 27, 2010, 11:42:51 PM »
You can red about the different versions here ( click the name fore detailed info )
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Search.aspx?query=Win32/Ramnit