Other > Viruses and worms

win32:ranky-cu

(1/1)

ivenholt:
This virus was just detected on my system and I can't find anything on how to remove it. I moved it to my chest is this enough? Thanks for any help.

FreewheelinFrank:
Hi ivenholt,

The malware should be disabled now, but you may need to remove the registry entry, as detailed here:

http://uk.trendmicro-europe.com/consumer/vinfo/encyclopedia.php?LYstr=VMAINDATA&vNav=3&VName=BKDR_RANKY.CU

You could also run Ewido which has a registry scanner and should remove any malware entries:

http://www.ewido.net/en/

Lisandro:
Better if you schedule a boot time scanning with avast (archive scanning enabled).
The best will be scanning either with ewido and a-squared  8)

DavidR:
The virus name win32:ranky-cu on its own is often insufficient to find out information about it as there is no standardisation or naming conventions when naming a new virus, so there are often aliases for the virus. However, in this case there is a lot of information returned on a google search for win32:ranky-cu.

What is often more helpfull is the infected file name and its location, example (C:\windows\system32\infected-file-name.xxx)? With this file name you can often find viruses associated with it (google.com).

You have done the right thing, 'first do no harm' don't delete, send virus to the chest and investigate.

There is no rush to delete anything from the chest, they can't do any harm there. Anything that you send to the chest you should leave there for a week or two. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

CharleyO:
***

Welcome to the forums, ivenholt.    :)

I deleted most of my info since David posted most of the same while I was researching.    ;)

A google search produced 454 results for this virus/trojan ......

http://www.google.com/search?hl=en&lr=&q=win32%3Aranky-cu&btnG=Search


***

Navigation

[0] Message Index