Ramnit A+H Virus Help

Discussion in 'Malware Help (A Specialist Will Reply)' started by Sephiroth878, Jul 15, 2012.

  1. Sephiroth878

    Sephiroth878 Private E-2

    Well, where to start... I know my external HDD is infected and I did run the flash disinfector by sUBS on the drive. When I ran all my scans I had the drive unplugged and off, so that it doesn't affect the scan of my actual system. I know that this virus is a pain to destroy completely as it self-propagates and destroys executables. Attached below is my log files. I hope I fixed the system lol...\

    Basic problems are games don't run (...Encountered an error and needs to close) and that most if not ALL of my programs refuse to work right.:confused

    I just want help clearing it out completely.
     

    Attached Files:

    Sephiroth878, Jul 15, 2012
    #1
  2. Sephiroth878

    Sephiroth878 Private E-2

    Also I ran the ESET online scanner as well. attached is the log:
     

    Attached Files:

    Sephiroth878, Jul 15, 2012
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Why didn't you fix what Malwarebytes found?
    This will not remove Ramnit infections. All executable type files have to be deleted. This included all downloaded installer file ( msi or exe files ) and also ALL htm or html files. Saving just one, will reinfect your whole PC.

    If you are really lucky, ESET was able to fix it by deleting files. However in many cases, systems will be come very unstable after a Ramnit infection and it is typically best to reinstall, Many of your programs ( games too ) may have already been damaged severely.

    If you rerun ESET again, does it find more infected files? If yes, repeat it a third time and attach the third and second logs.
     
    chaslang, Jul 15, 2012
    #3
  4. Sephiroth878

    Sephiroth878 Private E-2

    Oh, because for some reason MBAM made the logs BEFORE i quarantined the files. I will rescan now

    And for what its worth I did a FULL scan of my external HDD and deleted every infection. I did this from a Norton ghost image (LiveCD with networking) so as to not reinfect the HDD from my base system

    I am aware, however I didn't want autorun to reinfect the base system by an auto-execute. Know what I mean?
     
    Last edited: Jul 19, 2012
    Sephiroth878, Jul 19, 2012
    #4
  5. Sephiroth878

    Sephiroth878 Private E-2

    I am aware, however I didn't want autorun to reinfect the base system by an auto-execute. Know what I mean?
     
    Sephiroth878, Jul 19, 2012
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Have you done the below as previously requested?
     
    chaslang, Jul 20, 2012
    #6
  7. Sephiroth878

    Sephiroth878 Private E-2

    Yes it found files, which is odd, because those files were never deleted...only quarantined without restarting the computer. When there were no threats detected, it didnt give me the option to save to a log so.. The first log in the zip is a re-run of C:\ Drive And Operating Memory.... Was scanned AGAIN no errors.

    The second log is of my external (E:\) and was scanned again afterwards, no errors found.

    I hope that makes sense. I just dont understand why ESET doesnt just delete the files for me and ask me to reboot the computer once completed.:p
     

    Attached Files:

    Sephiroth878, Jul 20, 2012
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    So are you saying that no more infections are being found now if you run additional scans? Make sure that you have run new scans after your PC has been rebooted.
     
    chaslang, Jul 20, 2012
    #8
  9. Sephiroth878

    Sephiroth878 Private E-2

    yes when i scan it finds no additional files infected BUT at the same time if i go to a folder with an infected file (AFTER I reboot) the fiue is still there.
     
    Sephiroth878, Jul 24, 2012
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not following this sentence. Just prior to this you said there were no more infected files. Then you say you are going to a folder with an infected file and it is still there??????
     
    chaslang, Jul 26, 2012
    #10

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds