Ramnit.b virus???

shegirl

Anyone know anything about this?

I managed to trash my laptop the other day after it fell over the stairs from top hallway (yes,I know...stupid!!) and as I don't use it for much replaced it with one from a secondhand shop -tested.I had to return that one as soon as used the internet something happened and a virus wiped everything.

Today they replaced it with another and I instantly ran a virus check on it.It keeps coming up with severe warnings for win32/Ramnit.B which it then clears.I restarted it as suggested and it then found 834 threats with Ramnit.B. It says they've been cleared and now it's trying to clear a trojan ramnit.b

Is this one of these things that will keep reappearing and/or increasing? Obviously I'm not happy!!!

Starting to wish I'd nabbed my sons Mac instead:o

waddler_8

Are you inserting any flash drives or anything into these when you get them?

Ramnit is a true virus - a file infector.

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Virus:Win32/Ramnit.B

shegirl

waddler_8 wrote: »

Are you inserting any flash drives or anything into these when you get them?

Ramnit is a true virus - a file infector.

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Virus:Win32/Ramnit.B

Nope,nothing. When I took the first one back in they said I'd probably caught it myself but they'd check it to see then called to say it was their fault....

robmar0se

Sounds to me that you should get yr money back and look elswjere?

Here is info on this virus:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Virus:Win32/Ramnit.B

I don't know what virus check you're doing, but I would download (preferably on another PC) and run Malwarebytes first.. Then depending on the log, and activity after reboot, further action may be becessary.

waddler_8

Take it back again or wipe the drive and reinstall windows.

waddler_8

robmar0se wrote: »

I would download (preferably on another PC) and run Malwarebytes first.

Mbam's useless against file infectors. It doesn't have the capabilities to disinfect files of viral code.

robmar0se

waddler_8 wrote: »

Mbam's useless against file infectors. It doesn't have the capabilities to disinfect files of viral code.

So other than your suggestion of returning it or re-installing Windows, how else would you approach this?

waddler_8

I wouldn't approach it any other way. Wipe it and reinstall.

As it's new (to shegirl) there's no data to lose. You could invest time in trying to clean it - If you don't do it properly then your back to square one, files could be left corrupted etc - At least wiping the drive you know full well it's gone.

Ramnit opens a backdoor, steals all kinds of data - it's just not worth the messing about with.

robmar0se

I take your point in regard to there being no personal data on the lappie....

aliEnRIK

Makes it sound like the shop is spreading the infection to everything they sell

Snooze

Speaking from experience of having said worm on my own machine last summer, just forget about trying to remove it. You will fail. Believe me. It's a replicating worm and every time your AV catches an instance of it, it then replicates and destroys another piece of registry. I spent a full day trying various methods to get shut of it, I started with around 75 infected files and by the time I'd finished it was over 10,000. There's no fixing that. Get your Windows OS disk out and get cracking with a fresh install. It's the only way I'm afraid.