WIN32:Ramnit-H: need help removing all of it

OK this is just me being paranoid… Once you have completed we will try and fix the net framework problem (if it still exists)

Just writing from my own PC as the boot-time scan proceeds on the laptop. Almost immediately, Avast found a file (an inbox dbx file) infected by WIN32:PUP-gen. Move to chest failed (again, disk full, despite me setting the chest size to unlimited), so I deleted it. I realise I may just have wiped out the entire inbox, but I don’t think there was anything indispensable in there (if there was, can they be recovered)?

That was at 0%. Now, at about 40%, it’s found Ramnit in one of the Dell support files. I’m stopping the scan to have a check to make sure that the change to Avast’s chest size went through when I made them.

Regards, Jon.

That is the problem with this, every single piece must go otherwise it could rear its head again

Well, Maximum size of chest is 0 (MB), which Avast says means there’s no limit, but I’m still getting the disk full error on scans :frowning:

Damn.

Do I need to make any changes to max size of files to be sent (currently 16384KB)? 16MB sounds a bit small.

I told my friend he could have his laptop back tomorrow. Might have to change that plan :slight_smile:

Regards, Jon.

Sorry, posted just before your reply arrived.

Should I just go ahead and run a boot-time scan with Avast again, and simply delete and be damned when it comes to any further infected files?

Regards, Jon.

No empty the chest and then continue to add them especially as system files may be involved, so select cure as the first option, quarantine as the second

Sorry about the delayed reply - been busy with non-computer stuff.

I’m afraid I went ahead and hit delete all, but there seems to have been no fall-out so far. After that scan finished (Avast found another 500-odd infected files), I rebooted, and the laptop seemed fine. Next, I did a safe-mode scan with MBAM, and that came back clear too.

I gave the laptop back to my friend, and, touch wood, it’s been fine so far - no warnings of further infected files, and no blue-screens or anything. Sorry, I should have thought to copy the last Avast log over to this (my) machine, but I forgot.

There’s still the problem of the .NET framework updates failing, but my friend was nagging me for his machine back :slight_smile: If there are any further problems, I’ll empty the chest first before scanning, and if Ramnit makes a comeback, I’ll post again.

Many thanks for your help essexboy - it’s much appreciated by both me and my friend.

Cheers, Jon.

Reference the net framework problem … See here http://blogs.msdn.com/b/astebner/archive/2008/08/28/8904493.aspx