
19-06-2012
|
| Member | | Join Date: Jul 2011
Posts: 375
| |
| Re: WinNT/Ramnit.gen!A trojan removal process
WinNT/Ramnit.gen!A is an dangerous Trojan that downloads various remote application without your knowledge. This Trojan also install programs like rogue anti-virus showing different AD which really confuses you. Another symptom of WinNT/Ramnit.gen!A is that your system also starts redirect your search to another websites. You must immediately remove this virus as it has high level risk. To remove this virus I would like to suggest you to go through the below steps:
First of all remove below given file related to Trojan: Code: %AppData%\[random name].log
%Temp%\[random].exe
%Programs%\Startup\[random name].exe
%ProgramFiles%\Common Files\[random name].DLL Now once you finished with above steps, open registry editor (make sure you are the admin of the system), go to below location and delete everything : Code: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\[random name].exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\[random string
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = [random] When you finish above all steps just reboot system, that’s it… |