Win32/RAMNIT.A Anyone?
in [Anti-Virus]
|
From: David H. Lipman on 9 Aug 2010 19:50 From: "ASCII" <me2(a)privacy.net> | FromTheRafters wrote: >>Get - Gold 5% >>Some - Silver 10% >>Now - None >10% | No precision band usually indicated 20%, no? I believe you are correct. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: David H. Lipman on 9 Aug 2010 19:51 From: "John Navas" <spamfilter1(a)navasgroup.com> | On Mon, 9 Aug 2010 17:26:47 -0400, in <i3ptfm01lcf(a)news6.newsguy.com>, | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: >>From: "John Navas" <spamfilter1(a)navasgroup.com> >>| What I do with this class of virus: >>| 1. Turn off System Restore and delete all restore points. >>| 2. Note the names and locations of infected files. >>| 3. Boot from something like Ultimate Boot CD >>| <http://www.ultimatebootcd.com/>, and delete the infections. >>| Turn System Restore back on when disinfected. >>John, the fisrt time I have seen you post here :-) >>Actually, not a good idea as if you are dealing with a file infecting virus then you >>will >>have *numerous* legiimate files being deleted and thus a corrupted OS that is no longer >>bootable. >>Either you use an anti virus and "clean" the infected files or, wipe and >>reinstall/re-image. | I was specifically referring to virus files that are _not_ part of | necessary executables. When necessary parts of the OS are infected, | then I restore them from backup, which I think it preferable to trying | to disinfect them, all too often an imperfect process. You weren't specific John so it needed qualification. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: John Navas on 9 Aug 2010 19:56 On Mon, 9 Aug 2010 19:51:53 -0400, in <i3q4340h85(a)news4.newsguy.com>, "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: >From: "John Navas" <spamfilter1(a)navasgroup.com> > >| On Mon, 9 Aug 2010 17:26:47 -0400, in <i3ptfm01lcf(a)news6.newsguy.com>, >| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote: > >>>From: "John Navas" <spamfilter1(a)navasgroup.com> > >>>| What I do with this class of virus: >>>| 1. Turn off System Restore and delete all restore points. >>>| 2. Note the names and locations of infected files. >>>| 3. Boot from something like Ultimate Boot CD >>>| <http://www.ultimatebootcd.com/>, and delete the infections. >>>| Turn System Restore back on when disinfected. > >>>John, the fisrt time I have seen you post here :-) > >>>Actually, not a good idea as if you are dealing with a file infecting virus then you >>>will >>>have *numerous* legiimate files being deleted and thus a corrupted OS that is no longer >>>bootable. > >>>Either you use an anti virus and "clean" the infected files or, wipe and >>>reinstall/re-image. > >| I was specifically referring to virus files that are _not_ part of >| necessary executables. When necessary parts of the OS are infected, >| then I restore them from backup, which I think it preferable to trying >| to disinfect them, all too often an imperfect process. > >You weren't specific John so it needed qualification. I thought "this class of virus" would be specific enough, but you're right that I should have been clearer, and I thank you for the clarification. -- John "Assumption is the mother of all screw ups." [Wethern�s Law of Suspended Judgement]
From: David H. Lipman on 9 Aug 2010 20:02 From: "John Navas" <spamfilter1(a)navasgroup.com> >>You weren't specific John so it needed qualification. | I thought "this class of virus" would be specific enough, | but you're right that I should have been clearer, | and I thank you for the clarification. Thank you for all the networking information you have provided over the years. BTW: Your Thwate email cert. expired in January. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: John Slade on 9 Aug 2010 20:04
On 8/9/2010 3:42 PM, John Navas wrote: > On Mon, 9 Aug 2010 17:26:47 -0400, in<i3ptfm01lcf(a)news6.newsguy.com>, > "David H. Lipman"<DLipman~nospam~@Verizon.Net> wrote: > >> From: "John Navas"<spamfilter1(a)navasgroup.com> >> >> | What I do with this class of virus: >> | 1. Turn off System Restore and delete all restore points. >> | 2. Note the names and locations of infected files. >> | 3. Boot from something like Ultimate Boot CD >> |<http://www.ultimatebootcd.com/>, and delete the infections. >> | Turn System Restore back on when disinfected. >> >> John, the fisrt time I have seen you post here :-) >> >> Actually, not a good idea as if you are dealing with a file infecting virus then you will >> have *numerous* legiimate files being deleted and thus a corrupted OS that is no longer >> bootable. >> >> Either you use an anti virus and "clean" the infected files or, wipe and >> reinstall/re-image. > > I was specifically referring to virus files that are _not_ part of > necessary executables. When necessary parts of the OS are infected, > then I restore them from backup, which I think it preferable to trying > to disinfect them, all too often an imperfect process. > I do the same thing. Sometimes I do a repair reinstall if it's Windows XP then do the updates. John |