Author Topic: WIN 32: Ramnit- B  (Read 15509 times)

0 Members and 6 Guests are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #15 on: October 30, 2010, 01:18:27 PM »
Lets look at repairing any missing files

The easiest way would be to upgrade to Service Pack 3


http://www.microsoft.com/downloads/en/details.aspx?FamilyID=5b33b5a8-5e76-401f-be08-1e1555d4f3d4&displaylang=en

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #16 on: October 30, 2010, 04:45:11 PM »
Still not letting me reformat even after installing windows update.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #17 on: October 30, 2010, 04:50:04 PM »
OK I will check it out - what is your computer make and model ?

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #18 on: October 30, 2010, 04:57:23 PM »
OK I will check it out - what is your computer make and model ?
Thanks it is a

Compaq Presario SR1709UK

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #19 on: October 30, 2010, 05:11:42 PM »
Evidently there are two ways to re-install the system if F10 does not work

1. Click Start
2. Click Shutdown
3. The "Shut Down Windows" dialog box will be displayed
4. Select "Shut Down" from the menu
5. Start the system again.
6. When the Red Compaq logo appears press F8 repeatedly until prompted with the "Windows Startup Menu"
7. Select option 6 (Safemode Command Prompt) by pressing the down arrow key until Safe Mode Command Prompt is highlighted
8. Press Enter
9. At the C:\ prompt type D: and press Enter
10.At the D:\ prompt type CD CPQS and press Enter
11.At the D:\CPQS prompt type XQR press Enter

Method 2:

1. Click Start
2. Click Run
3. In the "Open" box type C:\CPQS\QUICKSR\FRESTORE.EXE

Performing these steps should resolve this issue and restore the computer to factory settings.
 Don't forget to back up any data first as your drive will be wiped.

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #20 on: October 30, 2010, 06:04:58 PM »
Evidently there are two ways to re-install the system if F10 does not work

1. Click Start
2. Click Shutdown
3. The "Shut Down Windows" dialog box will be displayed
4. Select "Shut Down" from the menu
5. Start the system again.
6. When the Red Compaq logo appears press F8 repeatedly until prompted with the "Windows Startup Menu"
7. Select option 6 (Safemode Command Prompt) by pressing the down arrow key until Safe Mode Command Prompt is highlighted
8. Press Enter
9. At the C:\ prompt type D: and press Enter
10.At the D:\ prompt type CD CPQS and press Enter
11.At the D:\CPQS prompt type XQR press Enter

Method 2:

1. Click Start
2. Click Run
3. In the "Open" box type C:\CPQS\QUICKSR\FRESTORE.EXE

Performing these steps should resolve this issue and restore the computer to factory settings.
 Don't forget to back up any data first as your drive will be wiped.
Okay tried method 1 and when I get to D: and type CD CPQS it says " The system cannot find the path specified"

It also says something similar when I try the 2nd method.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #21 on: October 30, 2010, 06:59:33 PM »
That would suggest you do not have a re-install partition, can you get to the d partition with windows explorer ? 

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #22 on: October 30, 2010, 07:09:01 PM »
That would suggest you do not have a re-install partition, can you get to the d partition with windows explorer ? 
Does that mean the virus deleted it or something? How do I get to the d partition?

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #23 on: October 30, 2010, 07:28:21 PM »
Okay yea I can get to D partition using Windows Explorer.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #24 on: October 30, 2010, 07:29:02 PM »
Double click  my computer and you should get the following - select drive D and see what is in there

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #25 on: October 30, 2010, 07:29:43 PM »
OOps cross posted - can you locate D:\CPQS

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #26 on: October 30, 2010, 07:52:50 PM »


No sign of CPQS.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #27 on: October 30, 2010, 09:21:56 PM »
That has the look of all your recovery data though

Could you check this page out and see if it is similar on your system http://h10025.www1.hp.com/ewfrf/wc/document?docname=bph07145&tmp_task=solveCategory&lc=en&dlc=en&cc=uk&product=1827184#N81

philipb231190

  • Guest
Re: WIN 32: Ramnit- B
« Reply #28 on: October 30, 2010, 09:32:05 PM »
That has the look of all your recovery data though

Could you check this page out and see if it is similar on your system http://h10025.www1.hp.com/ewfrf/wc/document?docname=bph07145&tmp_task=solveCategory&lc=en&dlc=en&cc=uk&product=1827184#N81
Yea that is exactly how it looks on my system when I want to restore.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: WIN 32: Ramnit- B
« Reply #29 on: October 30, 2010, 09:43:14 PM »
Your system must be a slightly later version than the one I checked out - so there is no need for F10

Follow the destructions under Recovering from Windows XP

And you should be good to reformat if you wish