DIGIT-ARC read-only archive · snapshot: July 23, 2026

W32.Ramnit worm. please help

11 posts · originally from https://geek.digit.in/community/threads/w32-ramnit-worm-please-help.134474/

evewin89
evewin89 Original post #1
Nov 29, 2010 at 2:30 AM
W32.Ramnit worm. please help

hello guyz.......recently my pc. got infected by a virus (or spyware) known as W32.Ramnit
i scanned my computer with Norton 360 and nod32, norton detected it but its not able to remove the virus so i formatted my os partition and then reinstalled xp but then also my not able to remove the virus from my computer.
so guyz please help me to remove this virus from my computer and my pen drive.

Few sign of this virus is that....
1.whenever i connect a pen drive it creates 4 shortcut links file in that pen drive + one autorun file + one recycler folder.
i used all the methods to delete autorun.inf and other virus folder + i also tried to search a particular virus service but m still unable to kill this virus. so please help.

2. whenever i run an .exe file, it creates a new .exe file beside the original .exe file. (eg. original file.exe virus file (original fileMgr.exe)

3.The virus created a file in %program file%/Microsoft/ with the name watermark.exe

so guyz plese help me ASAP.
evewin89
Dec 6, 2010 at 1:50 PM
I think no body in this forum encountered such a virus.
gagan007
Dec 6, 2010 at 2:30 PM
nope not me...but I found a possible remedy in majorgeeks forum...please try and let us know...


forums.majorgeeks.com/showthread.php?t=219821
A
Dec 6, 2010 at 2:54 PM
try using
Quick Heal, avira, kaspersky.
They might help.
Scan ur computer in safe mode with fully updated antivirus.

Also do you have any Linux installed.
Zangetsu
Dec 6, 2010 at 3:09 PM
@evewin89: the virus is still in ur system...so only removing frm pendrive wont help....
try bitdefender total security 2009 or 2010.....
try to format the pendrive from cmd....
Dark Core
Dec 6, 2010 at 3:36 PM
I would suggest you to go for Online Scanning,

Top 5 Online A/V Scanners : Top Online Scanners
J
Joker #7
Dec 6, 2010 at 4:39 PM
take back up of everything..

delete all partitions, parition, format and install XP form the scratch. virus again comes from ur other drives.

norton (everything) is crap...avira antivir is the best and only a good antivirus (no internet security suites) is more thn enough.

lastly..if u want to live a peaceful life..use Ubuntu linux and keep windows for gaming.
coderunknown
Dec 7, 2010 at 4:15 PM
^^

1. get a good A/V in a pendrive from your friend. whose PC is clean.
2. Format C drive or windows partition & reinstall win.
3. as soon as PC back, insert pendrive, install A/V. & do a boot scan or total PC scan. DON'T EVEN THINK OF TOUCHING THE OTHER DRIVES until scan over.
4. delete/quantine/move-to-chest or do whatever with those maniacs.
5. now update your A/V & also if possible install a anti-spyware & do scan of the other drives with the A/S.

done. PC should be clean.
evewin89
evewin89 #11
Dec 9, 2010 at 6:53 PM
thanks Sam.Shab for the info. 2day i again intalled xp after deleting "c" drive. an after intalling the os i installed avira antivir anti virus. then as soon as i began to install drivers for my computer from another drive the virus hit my computer. but avira antivir anti virus was able to detect which file got affected and it deleted those files. but i still know some where the virus is still there in my PC. i have lots of data on my other drive so i cannot format the whole computer. but i somehow think that formating the whole PC (including all the drives) is the only option left for me.