Win32/RAMNIT.A Anyone?

Oh, that's rich. The old "I knew what I meant".

Unfortunately, some users might consider some non-essential files as
needed files and they don't always have backups of them. Your stated
method does nothing to retain or recover them.

 

Are you rude by nature, or do you have to work at it?

 

I took the statement "I understood what I was saying in the first post,
thank you very much." as rude and responded in kind.

Good bye.

 

When you treat someone with discourtesy,
it's a bit disingenuous to complain about some mild pushback.

Good bye to you too.

 

Here is the other half of the double bill-

http://www.imdb.com/title/tt0091472/


TBerk

 

uh, John? That would be 'thankyouvurrymuch...'.

TBerk
I'm just say'n

 

Yea, I didn't care much for that one.

 

For Gods sake !!!.
This thread is supposed to be Re: Win32/RAMNIT.A
which I have a nasty dose of & want info / advice.
I'm having a Hell of a trouble finding that in
all this O/T chat.

If you want to have this very interesting & informative discussion Re:
Computer Servicing start up an OT thread on that.
@@@@ Mouse (irritable one) @@@

 

From: "Trimble Bracegirdle" <>

| For Gods sake !!!.
| This thread is supposed to be Re: Win32/RAMNIT.A
| which I have a nasty dose of & want info / advice.
| I'm having a Hell of a trouble finding that in
| all this O/T chat.

| If you want to have this very interesting & informative discussion Re:
| Computer Servicing start up an OT thread on that.
| @@@@ Mouse (irritable one) @@@

Advice:

Use a surrogate PC to scan the hard disk of the infected computer using a good anti virus
application such that it will remove the virus from infected files.

 

That happens a lot, it is often best to just create a new post describing
your problem in detail and your computing environment where relevant.

That is not to say that it isn't advisable for a poster to read the group
before posting, just that a discussion for one persons ramnit.a problem
might not be exactly what is needed for another person's ramnit.a problem.
This file infecting worm can be a bugger.

Going against the grain by being reasonable and expecting it of others won't
get you far here.

 

Thanks for protocol advice
This group is no where as Bitchy Bad & deranged as alt.windows7.general.
Looks as tho I need to make myself liked here as this Rmnet thing looks
like it will take a lot of work.
@@@mouse @@@

 

From: "John Navas" <>

| On Wed, 25 Aug 2010 22:03:42 -0400, in

| Best bet is to search for answers with Google Groups before posting,
| and after posting to separate (the little) wheat from (lots of) chaff.

Actually - No.

Many searches are poisoned so one can end up downloading more malware.

 

I haven't checked headers, but that could be exactly how he got here.
Many finding this thread in their web searches and/or usenet archive
searches might be expecting 'web forum' type ettiquette instead of
Usenet ettiquette.

[...]

 

Indeed. Of course, this is what I've always done before posting about such
things. Unfortunately, I'm often/usually on the frontlines of malware
infestations, so there's often not much to go on when I first see something
I'm not familiar with.

 

From: "John Navas" <>


| I've yet to see any case of that. Proof?

http://www.bluecoat.com/blog/google-image-searches-lead-malware

http://www.infosecurity-magazine.com/blog/2010/6/30/red-button-seo-poisoning-and-malware-campaign/180.aspx

http://www.downloadsquad.com/2010/04/20/gray-powells-unfortunate-legacy-seo-poisoning-and-malware/

 

The short answer is one that you probably don't want to hear, but by now
you've likely already came to the same conclusion. There is no way to
remove it. You will have to reformat and reinstall.

After the re-install, be very careful about plugging in USB keys that
may still be infected.

 

From: "John Navas" <>

| On Thu, 26 Aug 2010 06:10:36 -0400, in <>,


| There's nothing wrong with Google.
| These are just the usual malware sites.
| You might as well just give up on the Internet.

The point is through SEO poisoning the infected user won't be able "...separate (the
little) wheat from (lots of) chaff".

 

The uninfected Win32/RAMNIT.A user will be equally able or unable to do
that.