Ramnit.A Trojan

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by wragg1, Jun 10, 2012.

  1. wragg1

    wragg1 Private E-2

    Hey;

    Using a Win7 x64 laptop. Hadn't noticed anything until I went to go on the MS website to check something with my wireless not connecting after hibernation/sleep and it said the page can't be displayed but all others worked... Then instantly MSE said Ramnit.A had been discovered and quarantined. Found it's put some stuff in the startup/msconfig - random named files which look like a .txt icon on fire?

    Gotta note that there hasn't been any issues with the laptop except this. Everything else is running fine - just the alert came up and I found the dodgy files.

    Rebooted with networking and it doesn't seem to be a problem here, ran malware, mcafee stinger, MSE and AVG full scans but nothing found - I know it's still going to be there though.

    Ive read that a reinstall of the OS is usually required and the pc can never be "trusted" again - but I think I've got it quite quickly so hoping it's not infected many files .. Yet.

    I don't have a boot disk for the laptop so is there any other way I can format it if it's needed - I'm sure Win7 has a built in utility..?

    So - basically - what steps can I take towards this? I've read about the combofix etc but been warned against using it unless told...
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

  3. wragg1

    wragg1 Private E-2

    Thanks - I won't be able to do this for a couple more hours. Roughly how long will each scan take - I'm at work so trying to plan my time a bit...
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Length of time depends on how infected you are. :(
     
  5. wragg1

    wragg1 Private E-2

    Hey;

    Scans came back clean - although I ran this in safe mode... There's no option to export a log from ESET when it's came back clean (or there is and I can't see it)

    Shall I try it with a normal boot rather than safe mode?
     
  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Yes, just to be sure, run it once in normal mode.
     
  7. wragg1

    wragg1 Private E-2

    Yeah ran twice back to back in normal boot, came back clear. Everything seems to be working. Looks like deleting them in safe mode worked...

    Thanks for the help anyway :)
     
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds