W32.Ramnit!html
W32.Ramnit!html is a generic detection for .html files compromised by W32.Ramnit virus. W32.Ramnit!html identified files are appended by Trojan to perform malicious actions. When a contracted files is executed, it drops additional harmful file and tries to spread itself via removable USB drives.
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
How to Remove W32.Ramnit!html:
FIRST AID TO STOP W32.Ramnit!html:
If this dangerous .html virus have infected the computer, Windows registry including system files are also compromised. System Restore can overwrite infected files with a clean one by restoring the configuration to an earlier date. Though, this is only feasible if a restore point was created before you got infected with W32.Ramnit!html. Follow the procedures here to perform System Restore.
MANUAL REMOVAL OF W32.Ramnit!html:
1. Update installed anti-virus application to have the latest definition file.
2. Reboot Windows in Safe Mode
- After turning on the power, press F8 on the keyboard.
- Select Safe Mode from the menu.
3. Thoroughly scan the system and clean/delete all infected file(s).
4. Restart the computer in normal mode.
ADDITIONAL TOOLS AND PROGRAMS:
Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove virus and unfamiliar threats without using the traditional AV signatures. Download the tool and start scanning with Norton Power Eraser.
Technical Details and Additional Information:
Other functionalities of this Virus:
- Aside from HTML, this virus also infect .EXE and .DLL files.
- W32.Ramnit!html worm also propagates by creating a copy on recycle bin of removable drives.
- It tries to connect to a remote server to download malicious .DLL file.