Win32/RAMNIT.A Anyone?
in [Anti-Virus]
|
From: Heather on 8 Aug 2010 20:21 "FromTheRafters" <erratic(a)nomail.afraid.org> wrote in message news:i3ng76$n70$1(a)news.eternal-september.org... > "Heather" <lainie(a)nowhere.invalid> wrote in message > news:i3n942$u5f$1(a)news.eternal-september.org... >> >>>> Anyone know how, when and why Peter Foldes was added to the list? >>> >>> Yes, PCButts knows. >> >> 8-)) I suppose one could add....."does anyone care"?? Besides the >> always nosey BD?? > > Hi Heather. Hi FTR......been up this way lately? We are off to Quebec City on Labour Day for 5 days of sumptuous feasting, etc. Must brush up on my French. 8-))
From: Peter Foldes on 8 Aug 2010 23:00 Salut Heather Long time . La Ville du Quebec is beautiful and a lot of things going on there especially on the Plains of Abraham on Labor Day week-end -- Peter Please Reply to Newsgroup for the benefit of others Requests for assistance by email can not and will not be acknowledged. http://www.microsoft.com/protect "Heather" <lainie(a)nowhere.invalid> wrote in message news:i3nhn8$u10$1(a)news.eternal-september.org... > > "FromTheRafters" <erratic(a)nomail.afraid.org> wrote in message > news:i3ng76$n70$1(a)news.eternal-september.org... >> "Heather" <lainie(a)nowhere.invalid> wrote in message >> news:i3n942$u5f$1(a)news.eternal-september.org... >>> > Hi FTR......been up this way lately? We are off to Quebec City on Labour Day for > 5 days of sumptuous feasting, etc. Must brush up on my French. 8-)) >
From: Heather on 9 Aug 2010 00:29 Thanks Peter........we love the ambience and history and have been going there for about 40 years for short holidays. This time we are splurging and staying "inside the Walls".....lol. And flying down rather than a long drive from the GTA. I am really looking forward to a meal at Louis Hebert and a few little bistros that we like. -- Cheers......Heather "Peter Foldes" <okf22(a)hotmail.com> wrote in message news:i3nqvq$lvj$1(a)speranza.aioe.org... > Salut Heather > > Long time . La Ville du Quebec is beautiful and a lot of things going on > there especially on the Plains of Abraham on Labor Day week-end > > -- > Peter > > Please Reply to Newsgroup for the benefit of others > Requests for assistance by email can not and will not be acknowledged. > http://www.microsoft.com/protect > > "Heather" <lainie(a)nowhere.invalid> wrote in message > news:i3nhn8$u10$1(a)news.eternal-september.org... >> >> "FromTheRafters" <erratic(a)nomail.afraid.org> wrote in message >> news:i3ng76$n70$1(a)news.eternal-september.org... >>> "Heather" <lainie(a)nowhere.invalid> wrote in message >>> news:i3n942$u5f$1(a)news.eternal-september.org... >>>> >> Hi FTR......been up this way lately? We are off to Quebec City on Labour >> Day for 5 days of sumptuous feasting, etc. Must brush up on my French. >> 8-)) >> >
From: John Navas on 9 Aug 2010 13:52 What I do with this class of virus: 1. Turn off System Restore and delete all restore points. 2. Note the names and locations of infected files. 3. Boot from something like Ultimate Boot CD <http://www.ultimatebootcd.com/>, and delete the infections. Turn System Restore back on when disinfected. On Tue, 27 Jul 2010 04:51:56 GMT, in <i2lolb$s5r$1(a)news.eternal-september.org>, sfdavidkaye2(a)yahoo.com (David Kaye) wrote: >Sorry about the crosspost to ba.internet, but I know there are malware experts >out there. > >Does anybody have EXPERIENCE with Win32/RAMNIT.A ? I'm having a devil of a >time removing it. The only tool the detects it consistently is MS Security >Essentials, and MSSE keeps counting it and "disinfecting" it. > >I'm not sure if it's a virus or a worm. MSSE says it's a virus, but I can't >figure out what's launching it. > >I have eliminated one rootkit and subsequent scans show no more rootkits. >This thing has dropped startup payloads into the StartUp folder, into the Run >keys, into Prefetch, and it masquerades as everything from random 4-letter >clusters to names like "Microsoft Suite", etc. > >It also captures the date when Windows was first installed, so I can't >reliably search for the thing via date, either. > >Whenever MSSE detects a new round of infections (15, 78, all kinds of counts) >the infections are in everything from drivers to executables in all kinds of >directories. > >At the moment I'm running the computer in safe mode with no Internet and MSSE >is not detecting any more Ramnit. I've scanned it 3 times. But as soon as I >go back into regular mode and get an Internet connection back up it'll start >infecting again. > >Oh, and I've reset the Winsock stack twice just in case there's a little >wedgie in there. Still comes back. > >Any help would be most appreciated. You can reach me directly by email. The >address is valid. > >Thanks. -- John FAQ for Wireless Internet: <http://wireless.navas.us> FAQ for Wi-Fi: <http://wireless.navas.us/wiki/Wi-Fi> Wi-Fi How To: <http://wireless.navas.us/wiki/Wi-Fi_HowTo> Fixes to Wi-Fi Problems: <http://wireless.navas.us/wiki/Wi-Fi_Fixes>
From: David Kaye on 9 Aug 2010 15:41
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: >That version is DEFINITELY racist ! >This is the PROPER version. > >Bad - Black >Boys - Brown The "black boys" version was done to differentiate between black and brown. It's a horrible phrase, but people remember their color codes. |