w32/Z-Bot ... w32/Ramnit Virus removal

devillain · Jan 30, 2011

Recently had trouble with these two viruses ... after 2 days of attempts tp remedy the problem with Avira and Malwarebytes. I managed to install AVASTI Free . this ran a BOOT scan and sorted all problems in one fell swoop. Thankyou avasti!!
w32/ramnit will not allow antiVir software to be installed So DOWNLOAD onto removable drive (on another comp) CHANGE the name of the EXE file (eg abc.exe) Install and run a BOOT scan!!! Job done!!

Hope this is helpful!!!

dr.moriarty · Jan 30, 2011

Thanks for the post, devillain.

Because of some malware targetting specific filenames, re-naming the downloaded removal tools' .exe before the install is often needed.

*I'm glad that you caught W32/Ramnit in time - often our reply after reviewing logs showing this infection is:

Ramnit infections have really become quite nasty and dangerous. We could attempt to remove it, and we have had some success in the past, but recently it has become even more troublesome to remove. It is really safer to just bite the bullet and do a clean reinstall.

The problem is that the damage caused by this infection really makes a PC unreliable/untrustworthy. PE file infectors like Ramnit, Virut,.... etc can infect all executable files (DLL, EXE, SCR....and many more and also HTML). These infections can open back doors that truly may compromise your computer and your security. These backdoors could allow a remote attacker to access and instruct the infected computer to download and execute more malicious files.

In many cases the infected files (which could number in the thousands) cannot be disinfected properly by your anti-virus or by other scanning tools. Also when disinfection is attempted, the files often become corrupted and the system may become unstable or irrepairable. The longer Ramnit remains on a computer, the more files it may infect and/or corrupt so the degree of infection can vary.

Ramnit is commonly spread via a flash drive (usb, pen, thumb, jump) infection where it copies the Ramnit worm using a random file name. The infection is often contracted by visiting remote, crack and keygen sites. These type of sites are a major source of system infection.
Click to expand...

Log in or Sign up

w32/Z-Bot ... w32/Ramnit Virus removal

devillain Private E-2

dr.moriarty Malware Super Sleuth Staff Member

Log in or Sign up

w32/Z-Bot ... w32/Ramnit Virus removal

devillain Private E-2

dr.moriarty Malware Super Sleuth Staff Member

Useful Searches