Author Topic: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)  (Read 3715 times)

Offline WELSHYx

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« on: November 27, 2010, 01:28:31 PM »
Shut down my computer last night and upon turning the computer back on I had more than 50 virus notifications !

Avast has identified them as:

ExeDropper-gen (Trojan)

And

Win32 Rammit (Worm)

So far i have only moved the viruses to the chest

Yet Avast will not allow me to process a certain file disallowing me to move anything else

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21734
  • Gender: Male
    • Personal Message (Online)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #1 on: November 27, 2010, 01:32:59 PM »
Try this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always update the program before you scan
click the remove selected button to quarantine anything found
please post the scan log here if anything is found
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Online essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29040
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Online)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #2 on: November 27, 2010, 01:34:51 PM »
Malwarebytes will not work against this as it infects HTML files

Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download
 
It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that

Offline WELSHYx

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #3 on: November 27, 2010, 01:39:24 PM »
Okay I have downloaded Dr.Web will post the log ASAP

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21734
  • Gender: Male
    • Personal Message (Online)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #4 on: November 27, 2010, 01:42:39 PM »
Quote
Malwarebytes will not work against this as it infects HTML files
true, but just in case there is something else in there........
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline WELSHYx

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #5 on: November 27, 2010, 03:40:03 PM »
Log File is too large

Still getting multiple notifications of the Win 32 Rammit worm & Trojan
« Last Edit: November 27, 2010, 03:44:05 PM by WELSHYx »

Offline WELSHYx

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #6 on: November 27, 2010, 03:42:41 PM »
Win32:Ramnit-F

The name of the worm...

Offline Left123

  • There Is No Patch For Human Stupidity.
  • avast! Evangelist
  • Advanced Poster
  • ***
  • Posts: 1052
  • Gender: Male
  • Proud Community Member&Helper.
    • Personal Message (Offline)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #7 on: November 27, 2010, 04:04:47 PM »
upload the log at www.mediafire.com and post link here
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Online essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 29040
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Online)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #8 on: November 27, 2010, 04:26:57 PM »
Dependant on how deeply entrenched it is you may well be looking at a reformat here - so back up your data just in case - but not exe, scr, HTM,HTML

Offline WELSHYx

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #9 on: November 27, 2010, 09:37:43 PM »
I gave up and reformatted yet forgot to backup data thankfully the computers only 3 weeks old so I didn't have that much to lose..

Any ideas where I might have picked it up from and what I can do to protect from it in the future 

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21734
  • Gender: Male
    • Personal Message (Online)
Re: Virus Attack ! ExeDropper-gen (Trojan) Win32 Rammit (Worm)
« Reply #10 on: November 27, 2010, 09:42:51 PM »
You can red about the different versions here ( click the name fore detailed info )
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Search.aspx?query=Win32/Ramnit

Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now