Inactive Removal of win32/zbot.g

chuzzle · Aug 17, 2011

No joy with that one either, although I tried it on another computer too and it came back with a 404 - File or Directory not found error. Their website says that the online scanner is currenty unavailable too?

Cheers

Marty

Bobbye · Aug 17, 2011

Yes Kaspersky is " The Kaspersky Online Virus Scanner is being updated and improved!" so they don't have the scan up. They do this every once in a while.

I saw a different URL though, but I can't check it. I also got the 404 on link I have. May have to change link when they get back up.
====================================
Give this a try:
Panda Active Scan[/]

Click "Scan your PC".
If this is the first time you have used Panda Activescan, you will have to download the ActiveX controls.
Follow online prompts.
If Panda has a box to check to remove entries>>>don't check it<<<<<
I want to see the log, then I'll remove any entries.
Close when through and savve log. Paste in next reply.

I went back and review the logs- what browser are you using? It looks like Combofix removed the AGS explorer entries. So I wonder if you're trying to access these site using that browser. I am still of the mind that there is a setting problem preventing access to these sites.

I'd like to Update and rescan with Malwarebytes: Note: On the Scanner tab, make sure the the Perform Full Scan option is selected and then click on the Scan button.

When scan has finished, you will see this image:

Click on OK to close box and continue.

Click on the Show Results button.

Click on the Remove Selected button to remove all the listed malware.

At end of malware removal, the scan log opens and displays in Notepad. Be sure to click on Format> Uncheck Word Pad before copying the log to paste in your next reply.

chuzzle · Aug 29, 2011

Hey Bobbeye,

I couldn't access the Panda Security web page (using Firefox as my browser). Arc GIS doesn't have a browser btw.

I have updated Malware Bytes and run a full scan. Attached is the log file.

Cheers

Martyn.

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7604

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

29/08/2011 14:27:27
mbam-log-2011-08-29 (14-27-27).txt

Scan type: Full scan (C:\|E:\|)
Objects scanned: 351941
Time elapsed: 57 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MlsNtpqe (Trojan.Agent.H) -> Value: MlsNtpqe -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\documents and settings\marty\local settings\application data\efbbjphn\mlsntpqe.exe (Trojan.Agent.H) -> Quarantined and deleted successfully.
c:\documents and settings\marty\local settings\Temp\eqqivrpnalfnlgqh.exe (Trojan.Agent.H) -> Quarantined and deleted successfully.
c:\documents and settings\marty\start menu\programs\startup\mlsntpqe.exe (Trojan.Agent.H) -> Delete on reboot.
c:\program files\common files\Adobe\cs5servicemanager\cs5servicemanagermgr.exe (Trojan.Agent.H) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\firefoxmgr.exe (Trojan.Agent.H) -> Quarantined and deleted successfully.

Bobbye · Aug 29, 2011

You're still actively getting malware after 3 weeks of cleaning. We can't get a virus scan, so please do the following- we need to consider that you may have a file infector:

Make sure to use Internet Explorer for this
Please go to VirSCAN.org free on-line scan service
Copy and paste each of the following file paths into the "Suspicious files to scan" box on the top of the page, one at a time:

c:\windows\system32\userinit.exe

c:\windows\explorer.exe

c:\window\system32\svchost.exe
Click on the Upload button
If a pop-up appears saying the file has been scanned already, please select the ReScan button.
Once the Scan is completed, click on the "Copy to Clipboard" button. This will copy the link of the report into the Clipboard.
Paste the contents of the Clipboard in your next reply.

chuzzle · Aug 29, 2011

Hey Bobbeye,

So after rinng Malwae Bytes again I was able to run EST scanner online. Attaced is the list of threats found:

C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\19\67e22353-557fb014 Java/TrojanDownloader.OpenStream.NCA trojan
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\31\1ef03c5f-3d87dbdc Java/TrojanDownloader.OpenStream.NCA trojan
C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\49\4bd47631-74c6500f Java/TrojanDownloader.OpenStream.NCA trojan
C:\Program Files\Ableton\Live 8.0.1\Program\Ableton Live Engine.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Program\Live 8.0.1.exe Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\Devices\Pc\Analog.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\Devices\Pc\Collision.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\Devices\Pc\Corpus.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\Devices\Pc\Electric.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\Devices\Pc\Tension.dll Win32/Ramnit.H virus
C:\Program Files\Ableton\Live 8.0.1\Resources\EventRecorderHelpers\ReplacerPlugin\Pc\replacer.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\glut32.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\libcurl.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\libeay32.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\msvcp71.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\msvcr80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\ssleay32.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\Symlib.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\apd\moxplugins\microsoft.vc80.crt\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\apd\moxplugins\microsoft.vc80.crt\msvcr80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Bridge CS5\Plug-Ins\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\AdobeOwl.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\AdobeOwlCanvas.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\AdobeSWFL.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\mfc80u.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\Replace.exe Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Extension Manager CS5\XManCommand.exe Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Help\Adobe Help.exe Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\icuuc34.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\MSVCP71.DLL Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\msvcr80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\msvcrt40.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe InDesign CS5\libmmd.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe InDesign CS5\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe InDesign CS5\tbb.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe InDesign CS5\tbbmalloc.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\A3DLIBS.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\aif_ogl.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\cg.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\cgGL.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\image_runtime.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\libeay32.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\libexpat.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\libifcoremd.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\libmmd.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\pdfsettings.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\Plugin.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\QuickTimeGlue.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\ssleay32.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\tbb.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\TfFontMgr.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\TfKernel.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\TFKGEOM.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\TFUGEOM.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\wu3d.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\MATLAB\Required\psmatlab.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\Plug-ins\Import-Export\FireWire.dll Win32/Ramnit.H virus
C:\Program Files\Adobe\Adobe Photoshop CS5\Required\Droplet Template.exe Win32/Ramnit.H virus
C:\Program Files\Adobe Media Player\Adobe Media Player.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\ArcToolBox\Scripts\TestGPRAM.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\3DSymbols.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\3DSymbolsLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\3DSymbolsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AccessDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AccessWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ActRpt.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\adjustment.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AdjustmentUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfAppRef.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfCmnUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfLockMgr.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfTopoGp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AfuiCust.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\afUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AGSClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aiarcres.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aifeat.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aigridio.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aisdtslist.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aisdtsp2a.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aisdtsr2g.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aishape.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\aitopo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Animation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AnimationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AnnoLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Annotation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AnnotationLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AnnotationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AoInitializer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\APEUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AppControlsSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AppInitializerLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AppROT.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcCatalogEx.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcMapExUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ARConfig.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcPressPlugin.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcPressPluginUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcReaderHost.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcReaderLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcReaderSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcTopo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebCommon.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebGeocoding.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebRouting.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebSpatialQuery.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ArcWebSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AsciiConv.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\atl71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AttributeTransfer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AttributeTransferUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\AVImport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\BasicRasterPicture.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\BasicRasterSdeLoader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\BGLGeomChest.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CacheRasterDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Cadastral.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadastralFabric.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadastralFabricLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadastralUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadFeatureLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadSettingsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CadWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CalculatorUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CartoControlsLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\categories.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CGraph32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ClassifyUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\COGOObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\COGOReport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\COGOTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Color.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ColorRampUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\colorUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\comerr32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ComplexSymbols.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CompressedDataFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ComputationNetworkAnalysis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ComUtility.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlsLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlsSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlTools3DAnalyst.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsEditing.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsFeatureSelection.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsGeneric.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsGlobe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsGraphicElement.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsInk.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsInquiry.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsMapNavigation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsNetworkAnalyst.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsRouting.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsSchematic.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ControlToolsSupportLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\CoverageFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ctlbase.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DaeFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DataConverterLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DataGraph.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DataGraphLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DataGraphUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DECoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\delegate.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DFORRT.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\digitizer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Dimension.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DimensionUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Directions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DirectionsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Display.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DisplayFeedback.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DisplayGraph.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DisplayLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DisplayUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DissolveUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DistributedGeodbLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DistributedGeodbUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DIToolbox.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DIToolboxUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\DynamicDisplay.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\EdgePlugin.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\EditorEx.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\EditorExtLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\EditorLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\EditTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ESDA.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\esriEncodeMrSID.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ESRIErrorReporter.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ESRIMobileCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ESRIPrintShared.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\esriRegSvr32.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ExcelWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Export.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ExportUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dha61s.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dha720.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dhm356.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DHMM11.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dhmm36.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dhmm56.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DHT33D.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DHT41S.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dht42s.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dht61s.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds70ke.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds71ke.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds90me.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds90ne.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds90oe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds90qe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds91me.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_ds91oe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DST08E.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DST0OE.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DST18E.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\E_DST1OE.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dumw02.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dumw06.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\e_dumwm3.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FdaCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FdaCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FdaRel.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FDOOleDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FeatureDataConverter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FeatureDataElements.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FeatureLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FeatureLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FgdbRasterDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FgdbUtilLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FileDataElements.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FileDBCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FileGDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\FileGDBWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GACoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GADB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAEngineLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAEngineUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAExport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GALayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GALayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAMethods.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAMethodsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Garcia.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GarciaUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GARenderer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GATools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GAUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gdal14.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GdalRasterDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GDBCheckInUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GDBCheckOutUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GdbCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GDBDisconnectedEditingUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GdbNet.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GDBReplicationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GdbTopo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeocodeClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeocodeServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Geocoding.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeocodingUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Geocompare.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDatabaseUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDataClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDataExtraction.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDataServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDataTransfer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDBReplication.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeodimeterConverter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoDisconnectedEditing.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeometricNetworkUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Geometry.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoprocessingLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoProcessor.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoRefUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GeoSurveyEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Globe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeCamera.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeCoreUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeDeployUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeDisplay.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeLayers.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeServerCooker.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeServerLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeServerLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GlobeViewerCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GMxGraphics.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GMxTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GMxUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpAnalysisFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpArcFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpArcFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPCartography.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpConversionFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpCoreFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpDataManagementFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpDispatch.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPGACore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpGAFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPGAFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpGeocodingFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpGlobeFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpGlobeFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpLinearReferencingFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpMobileFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpNaControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpNaFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPNAFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpNcFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpPythonCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpRasterFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPSACore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPSAFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GPSAFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpSdcFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpServerFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpsSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpsSupportLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpsSupportUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpTinFunctionFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpTinFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpToolbox.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GpToolboxUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GraphicElements.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GraphicElementsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GraphicsLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\grf_ecw.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GridCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GridTableOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GroupLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GSIConverter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GSIOpCodeHandlers.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrdb293.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrdb2zos93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrinf93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrora10g93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrora11g93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrora9i93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrpg93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gsrvrsql93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gssapi32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\gtkctl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Gx3DView.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxAGS.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxAGSUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxCad.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxCadUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxCoverage.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxCoverageUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxDataGraph.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxDialog.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxEdge.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxEdgeUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxGDS.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxGlobe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxGlobeView.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxIMS.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxMetadata.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxNetworkDatasetUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxObjectsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxOGC.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxOGCUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxRaster.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxRasterCatalogUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxRasterUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxScene.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxSDC.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxSDCUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxShapefile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxShapefileUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxToolbox.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxViews.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxVpf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\GxVpfUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Hatch.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\HatchUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\hd420m.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\hm420m.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\hpldrlgl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\icudt26l.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\icuin22.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\icuio22.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\icuuc22.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\icuuc26.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImageAccessLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImageClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImageServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImageServerLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImageServerLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\import71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Import71.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\IMSConnector.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImsFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\IMSLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\IMSLayerLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\IMSLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\IMSServiceLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ImsWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\InMemoryWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\JoinUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\k5sprt32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\kdu60.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\KmlConvertor.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\KmlLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\KmlServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\krb5_32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LabelPlacement.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Layer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LayerLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LayerUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LayoutTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LDExtension.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\libcurl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\libeay32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\libpq.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ListenerSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LocationQueryEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\loceng.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\locssa.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\lti_dsdk_cdll.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\lti_dsdk_dll.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\LxWin32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Map.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapAnimation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapAnimationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapElements.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapElementsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapFeedback.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Maplex.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MaplexAnnotation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MaplexExtUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MaplexUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapServerLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MapServerLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\mapui.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Marker3DFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MBViews.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Md3DaControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MdControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MdControls2.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MdDialog.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MDGAControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MdObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MdSaControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MessageSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MetaSearch.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\mfc71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\mfc71u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MobileClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MobileServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ModelBuilder.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MOVE3Com.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\move3ESRI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\msvcp71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\mtchloc.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\mtchmt.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MxdServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MxLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\MxTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NCScnet.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NCSEcw.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NCSUtil.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetCDFCLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetCDFCppLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetCDFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetCDFUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetCDFWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetEngine80.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Network.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkAnalyst.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkAnalystClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkAnalystLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkAnalystSolvers.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkAnalystUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkDataset.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NetworkLoader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NgFlore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NgForms.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NgObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NgUtils.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\NMFDocument.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ntvinv.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ntvocx.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ObjectLoader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ObjectLoaderUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\og903asu.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OGCClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OleDBWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OleFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ONCRPC.DLL Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OpenFlightFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OutputLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\OwnControlsLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PageLayout.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ParameterLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PCCoverageFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PCCoverageWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PDFExporter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PdfExpt.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\pe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PkgUtility.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PlugInDataSource.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PlugInWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PointObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PointTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PrintOut.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PrintOutUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\PSExporter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Publisher.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\qt4ctl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\qtctl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\QueryUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterAnalysis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterAnalysisUtilLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterCatalog.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterCleanupUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterConditionalOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterConversionOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDatasetUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDefaultsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDensityOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDistanceOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterDomain.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterEngineF.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterExploratoryOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterExtractionOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterGeneralizeOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterGraphicElements.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterGroundwaterOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterHydrologyOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterInterpolationOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterIO.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterJET.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterLoader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterLocalOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterMakerOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterMapAlgebraOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterMathOps.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterMathSupportOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterModel.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterMultivariateOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterNeighborhoodOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterPicture.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterReclassOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterRenderer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterRendererUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterSDE8x.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterSdeLoader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterSolarOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterSurfaceOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterTransformationOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RasterZonalOp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RelationshipClassUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Renderers.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RendererUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Reporter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationEffects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationSymbols.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepresentationUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RepUML.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RouteEditorUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RouteEvents.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RouteEventsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RSGeocoder.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RSGeocoderUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RtfExpt.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\RWUXThemeSU.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SALibUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SASharedUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ScalarReference.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ScalarReferenceUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Scene.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SceneExport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SceneExportUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SceneFilters.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SceneGraph.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SceneRenderers.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicAlgorithms.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicAnalyst.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicBuilder.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicBuilderUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicDatasetUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicDesignerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicDS.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicExtension.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicGPFactories.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicGPFunctions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicLayoutParameters.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicLinker.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicNgProject.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicRelation.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicRules.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicRulesUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicUtil.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicUtilUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SchematicWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdcdbx.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SdcExtractor.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SdcIndexBuild.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SDCPlugin.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SDCQueryEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sde.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Sde3FDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdedb2srvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdedb2zossrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SdeFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdeinfsrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdeora10gsrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdeora11gsrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdeora9isrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdepgsrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SdeRasterDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdesetup.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sdesqlsrvr93.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SdeWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SDRConverter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ServerConn.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ServerStyleGallery.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SetupSDB.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SFLLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SFLLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\sg.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ShapefileFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ShapefileWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SidEncoder.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SimpleDataConverter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SketchUpFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SketchUpLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SketchUpReader.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SMRouter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SMRouterUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SMUExtension.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SpatialAnalystUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SpatialReferenceUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ssleay32.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\StdDlg.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\StyleGallery.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\StyleGalleryClasses.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\StyleGalleryUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyComputations.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyConverters.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyDatabase.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyDatabaseUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyDataExchange.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyEditor.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyEditorUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyEditorUtil.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SurveyLicenseBroker.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SVGExporter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SxGraphics.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SxTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SxUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SymbolLevelsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\symbologyUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\SystemUIUtil.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TableCoreUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TableCoreUILib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TableDefUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TabletPCSup.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TableUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TDSCoordConv.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TDSRawConv.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Terrain.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TerrainLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TerrainLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TerrainUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TextExpt.dll Win32/Ramnit.H virus

chuzzle · Aug 29, 2011

here are the rest of those threats from ESET:

C:\Program Files\ArcGIS\Bin\TextFileWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Texture.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinDatasetUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinDb.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinEngine.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinRenderer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinRendererUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TinWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Titus.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TitusUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ToolboxExt.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ToolSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TPSObjects.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TPSReport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TPSTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingActions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\trackinganalystcmds.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\trackinganalystgx.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingCatBrowser.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingEngineSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingPlayback.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\trackingpropertypages.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingRenderer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\trackingserverconnectors.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingSQLParser.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingTools.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\trackingtxactions.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TrackingWorkspace.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\Trout.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71adjustment600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71blayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71clayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71ctrl600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71dgraph600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71dialog600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71edgelayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71editor600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71extension600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71geometry600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71hlayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71internalanalysis600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71labeling600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71layoutclient600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71layoutserver600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71layoutshared600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71olayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71slayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsvx71tlayout600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71agraph600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71algorithms600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71serviceclient600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71serviceserver600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71serviceshared600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\tsx71utils600u.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\TurnUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\UdUnitsLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\UIControls.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\UMLGDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\UtilityNetworkAnalysis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\UtilityNetworkAnalysisUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\vectorization.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VectorizationUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VersionUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VideoExport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\ViewerCoreLib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VpfFDB.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VpfWorkspaceFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\VRML3DFile.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\WCSServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\WFSServer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\WMSLayer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\WMSLayerUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\wxctl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\xerces-c_2_3_0.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\xerces-c_2_5_0.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\xerces-c_2_6.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\xerces-c_2_7.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\xerces-depdom_2_7.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\XmiUML.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\XMLSupport.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\XMLSupportUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\XYEvents.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\XYEventsUI.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\zlib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\zlib1.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\zlibwapi.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Bin\znglib.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\com\atl71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\com\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\acad.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\arcdialog.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\arcgismap.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\cgdef.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\csv.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\dbf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\dsfl.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\eps.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\esri_gml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\facet.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ff.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fm0.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeguimfc.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeprompter.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmepython23.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmepython24.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmepython25.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeserverapi.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmesurface.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeutil.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeview.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme_dirDialog.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme_robohelp.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme_sqlite28.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fme_sqlite3.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\genamap.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\geodatabase8.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\geodatabase9.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\geodatabase_xml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\geodb.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\geos_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\gg.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\gml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\gml2.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\grd.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\GUILocalizer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\icuin38_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\icuuc38_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\idrisi.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ieps.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\iff.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\interpolate_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\iso8211.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\libcurl_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\logcount_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\mapinfo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\mapod.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\mapod2004.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\mcf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\msvcp71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ntf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\null.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\OGCGeometry_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ora8ilist.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ora8list.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\PackAttributes_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\pcache.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\pe.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\qfmeext.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\qtcore4.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\qtgui4.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\qtxml4.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\qt_workbench.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\regis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ReplaceCoordinates_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\s57.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\SciLexer.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\sde.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\sdts.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\seis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\sg.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\slf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\strumap.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\svg.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\tcl_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\threadlockmgr.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\tiger.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\trianglesurface.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\ufo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\uuid_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\vml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\vrml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\wbinfo.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\wfs.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\workbench.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\wrapid.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\Xalan-C_1_10_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\XalanMessages_1_10_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\xerces-c_2_8_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\xerces-depdom_2_8_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\xml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\zgf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\zlib_fme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\zmap.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\zycor.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeobjects\python23\_pyfme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\fmeobjects\python24\_pyfme.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\Angle_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\citygml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\CRC_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\db2.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\dgnv8.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\fme_ado.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\Geometry_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\georss.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\georssfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\gml2factory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\GridSnapper_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\json.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\jsonqueryfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\kml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\kml21.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\MinimumSpanningCircle_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\neighborcolorsetterfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\ociunk_geomedia.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\odbc2.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pythonfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\Python_func.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\qlf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\queryfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\sectorfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\snappingfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\sotftoposurface3dfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\spatialrelationshipfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\sqlite3.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\SurfaceModelFactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\textline.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\textstrokerfactory.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\usgs_dem.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\zmapraw.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\aixm\aixm.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\ifc\ifc.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\jobxml\jobxml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\landxml\landxml.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\IFXCore.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\pdf.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\plugins\IFXExporting.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\plugins\IFXImporting.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\plugins\IFXRendering.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\pdf\plugins\IFXScheduling.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\postgis\libpq.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\plugins\postgis\postgis.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Data Interoperability Extension\tcl_library\reg\tclreg11.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Image Server\Bin\ISClient.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Image Server\Bin\ISGlobal.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Image Server\Bin\ISServerManager.dll Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Support\PILauncher.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Support\VBA\msregmso.exe Win32/Ramnit.H virus
C:\Program Files\ArcGIS\Utilities\MakeServerStyleSet.exe Win32/Ramnit.H virus
C:\Program Files\CometBird\freebl3.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\mozcpp19.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\plugin-container.exe Win32/Ramnit.H virus
C:\Program Files\CometBird\softokn3.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\components\browserdirprovider.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\components\brwsrcmp.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\extensions\bookmarks@cometmarks.com\components\ICometMarksExtension.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}\components\IBitCometExtension.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\extensions\{F5CEF9AD-F6AF-4b69-AB6D-936BF6BCB6D7}\components\SoftwareUpdateChecker.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\plugins\npBitCometAgent.dll Win32/Ramnit.H virus
C:\Program Files\CometBird\plugins\npnul32.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Adobe Photoshop CS5\32 bit Photoshop dlls\AlignmentLib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Adobe Photoshop CS5\32 bit Photoshop dlls\libifcoremd.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Adobe Photoshop CS5\32 bit Photoshop dlls\libmmd.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\libcurl.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\libeay32.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\ssleay32.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\zlib1.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\plugins\com.adobe.csi.auth.keystore_2.0.0\os\win32\KeychainSupport.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\CS5ServiceManager\plugins\com.adobe.csi.pipes_2.0.0\os\win32\PipeSupport.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\HIL Help Search\ahclient.exe Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\CNSWin_MacEnc.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\CSWin_MacEnc.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\MORPHLibs.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\NFTWin_MacEnc.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\PACWin_MacEnc.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\Linguistics\5.0\Providers\Plugins2\WRLiloPlugin1.2\WRLiloPlugin.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\SING\Mark II\SING.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe\SING\Mark II\TIN.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\template.exe Win32/Ramnit.H virus
C:\Program Files\Common Files\AnswerWorks 4.0\LtMorph40.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\ArcGISFileHelper.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\ArcGISVersion.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\DADFLib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\ESRIRegistrationMgr.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\de\resArcGISUpdater.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\de\resESRIDetect.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\es\resArcGISUpdater.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\es\resESRIDetect.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\fr\resArcGISUpdater.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\fr\resESRIDetect.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\ja\resArcGISUpdater.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\ja\resESRIDetect.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\zh-CN\resArcGISUpdater.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\bin\zh-CN\resESRIDetect.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ArcGIS\ThirdParty\bin\7z.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\esriShellExt.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\msvcp71.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\ArcGISDomain.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\cso.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\digestlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\ej2k.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\ej2k_base.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\eoshdflib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\geotiffnglib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\iso8211util.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\jpegnglib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\kakaducoresys.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmelib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmexception.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmfileio.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmgnutimlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmgrdlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmhdflib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmjpglib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmlog.dll Win32/Ramnit.H virus

chuzzle · Aug 29, 2011

and the last of them.............

C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmmgrslib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmmodlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmosarlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmpholib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmraster.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmrasteru.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmrgxlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmrgxlibu.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmrsmlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmspline.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmtext.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmthrlib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\lggmtiflib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\msvcp71.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\ncsalib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\ncsamflib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\rdo.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\rdoBC.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\tiffnglib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\XFCOMUtility.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\bin\ntx86\znglib.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\fontservers\otl.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\affine.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\camera.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\framecamera.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\landsat.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\orthosar.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\polynomial.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\projpair.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\pushbroom.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\rubbers.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\geometricmodels\spot.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\gridformat\grid.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\adrg.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\bmp.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\dted.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\e7x.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\gbn.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\gif.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\img.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\ingr.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\jfif.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\jp2.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\mrsid.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\nitf.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\png.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\raw.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\rpf.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\srp.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\tiff.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\rasterformats\uai.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\affine.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\camera.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\default.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\framecamera.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\landsat.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\pushbroom.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\rubbers.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\ESRI\Raster\usr\lib\ntx86\resamplemethods\spot.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\IScript\iscript.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\Objectps.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help\hxvz.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help 8\cmddef.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help 8\custsat.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help 8\dexplmnu.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help 8\msenv.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Help 8\vslog.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\contextp.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\msenv2p.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\msenv80p.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\msenvp.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\TextMgrP.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\VSCryptoInfo.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\VSFileHandler.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\VsLogP.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\MSEnv\vsp.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\ATL70.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\CMDDEF.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\Compsvcspkg.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\CSSPKG.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\HTMDLGS.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\HTMED.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\MSENV.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\MSVCP70.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\MSVCR70.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\MSVCR71.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\TRIDSN.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\VisualStudioTeamCore.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\VSBROWSE.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\OFFICE12\VS Runtime\VSTLBINF.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\PROOF\MSTHES3.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Repostry\RepRC.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\SQL Debugging\sqldbg.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.DLL Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VC\msdia80.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\Visual Database Tools\dsref80.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\coloader.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\coloader80.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\csm.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\dbgautoattach.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll Win32/Ramnit.H virus
C:\Program Files\Common Files\System\Ole DB\MSOLAP80.DLL Win32/Ramnit.H virus
C:\Program Files\CS5\Adobe Illustrator CS5\Software\payloads\AdobeHelp\AIRInstallerRunner.exe Win32/Ramnit.H virus
C:\Program Files\CS5\Adobe Indesign CS5\Software\payloads\AdobeHelp\AIRInstallerRunner.exe Win32/Ramnit.H virus
C:\Program Files\CS5\Adobe Photoshop CS5 Extended Edition\Software\payloads\AdobeHelp\AIRInstallerRunner.exe Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\charset.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\gettextlib.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\gettextpo.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\gettextsrc.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\libexpat.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\mfc80.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\mfc80u.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\msvcp80.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\msvcr80.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\EASEUS Partition Master 6.5.2 Home Edition\bin\zlib1.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\Todo Backup 2.0\bin\AuConv.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\Todo Backup 2.0\bin\AuConvEx.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\Todo Backup 2.0\bin\DataMana.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\Todo Backup 2.0\bin\DevCtrl.dll Win32/Ramnit.H virus
C:\Program Files\EASEUS\Todo Backup 2.0\bin\RecLib.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\client\earthflashsol.exe Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\client\earthps.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\client\ge_expat.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\client\googleearth_free.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\client\gpsbabel.exe Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\earthps.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\ge_expat.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\googleearth_free.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\ie\6.0.3.2197\ge_expat.dll Win32/Ramnit.H virus
C:\Program Files\Google\Google Earth\plugin\ie\6.0.3.2197\plugin_ax.dll Win32/Ramnit.H virus
C:\Program Files\HijackThis\HijackThis.exe Win32/Ramnit.H virus
C:\Program Files\InstallShield Installation Information\{895722FE-25FE-4854-95AC-B0C42F9DBEDA}\Install.exe Win32/Ramnit.H virus
C:\Program Files\InstallShield Installation Information\{895722FE-25FE-4854-95AC-B0C42F9DBEDA}\ISSetup.dll Win32/Ramnit.H virus
C:\Program Files\InstallShield Installation Information\{895722FE-25FE-4854-95AC-B0C42F9DBEDA}\_ISSetup.dll Win32/Ramnit.H virus
C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\ISSetup.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\axbridge.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\cmm.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\dt_shmem.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\dt_socket.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\eula.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\hprof.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\instrument.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\ioser12.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\j2pcsc.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\j2pkcs11.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jaas_nt.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\java_crw_demo.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jawt.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\JdbcOdbc.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jdwp.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jkernel.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jli.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jpicom.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jpiexp.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jpinscp.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jpioji.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jpishare.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jsound.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\jsoundds.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\management.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\mlib_image.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\npoji610.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\npt.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\rmi.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\splashscreen.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\sunmscapi.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\unpack.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\w2k_lsa_auth.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\bin\new_plugin\msvcr71.dll Win32/Ramnit.H virus
C:\Program Files\java\jre6\lib\deploy\lzma.dll Win32/Ramnit.H virus
C:\Program Files\Leica Geosystems\Shared\Bin\NTx86\msvcp70.dll Win32/Ramnit.H virus
C:\Program Files\Leica Geosystems\Shared\Bin\NTx86\msvcr70.dll Win32/Ramnit.H virus
C:\Program Files\Leica Geosystems\Shared\Bin\NTx86\SxSUtility.dll Win32/Ramnit.H virus
C:\Program Files\LSoft Technologies\Active ISO Burner\WnASPI32.dll Win32/Ramnit.H virus
C:\Program Files\Messenger\msgsc.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Office\Office12\EXCHCSP.DLL Win32/Ramnit.H virus
C:\Program Files\Microsoft Office\Office12\ADDINS\MSVCR71.DLL Win32/Ramnit.H virus
C:\Program Files\Microsoft Office\Office12\ADDINS\OTKLOADR.DLL Win32/Ramnit.H virus
C:\Program Files\Microsoft Silverlight\4.0.60310.0\coreclr.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\cmddef.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\compluslm.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\custsat.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\dbghelp.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msdis150.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msenc80.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msenv.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\mspdb80.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\mspdbcore.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\msvb7.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\ProjectAggregator.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\vslog.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\vssln.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\vstlbinf.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VsWizard.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\AvVsPkDH.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\dbghelp.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\mcee.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvb7.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\symsrv.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Compsvcspkg.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\dirprj.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\cpde.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\cscompee.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\encmgr.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\shmetapdb.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\vsdebug.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\vdt80.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\Common7\Tools\VDT\vdt80p.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bin\mscormmc.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bin\signtool.exe Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\SDK\v2.0\Bin\TlbRef.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\sqlserver\mssdi98.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\VB\Bin\msvbprj.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\VC\vcpackages\DirControl.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\cslangsvc.dll Win32/Ramnit.H virus
C:\Program Files\Microsoft Visual Studio 8\VC#\VCSPackages\csproj.dll Win32/Ramnit.H virus
C:\Program Files\MSN\MSNCoreFiles\OOBE\obelog.dll Win32/Ramnit.H virus
C:\Program Files\MSN\MSNCoreFiles\OOBE\obemetal.dll Win32/Ramnit.H virus
C:\Program Files\MSN\MSNCoreFiles\OOBE\obepopc.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvgames.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvmccss.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvmobls.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvsvs.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvvitvs.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Display\nvwss.dll Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Drs\dbInstaller.exe Win32/Ramnit.H virus
C:\Program Files\NVIDIA Corporation\Installer2\Display.Driver.0\dbInstaller.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\gengal.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\nsplugin.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\odbcconfig.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python26.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\senddoc.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\stclient_wrapper.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\testtool.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\bin\python.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-6.0.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-7.1.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-8.0.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\ooofilt.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\abpmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\accmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\adabasmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\adabasuimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\adomi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\aggmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\analysismi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\animcore.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\avmediami.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\avmediawin.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\basctlmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\basegfxmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\basprovmi.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\behelper.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_frmmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_gomi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_migratefiltermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_ofami.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_sbmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_schmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_scmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_sdmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_smmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_somi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_svtmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_svxmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_swmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_wrappermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bf_xomi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bibmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\bindetmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\cached1.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\calcmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\canvasfactory.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\canvastoolsmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\chartcontrollermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\chartmodelmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\charttoolsmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\chartviewmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\collator_data.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\communimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\comphelp4MSC.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\configmgr2.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\cppcanvasmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\crashrep.exe Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ctlmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\cuimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\datemi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbacfgmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbami.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbasemi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbaxmlmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbghelp.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbmmmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbpmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbpool2.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbtoolsmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dbumi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\deploymentguimi.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\deploymentmi.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\deploymentmiscmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dict_ja.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dict_zh.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\directx5canvas.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\directx9canvas.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dlgprovmi.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dnd.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\drawinglayermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\dtrans.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\egimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\embobj.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\emboleobj.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ememi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\emsermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\epbmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\epgmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\eppmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\epsmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\eptmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\erami.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\etimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\evtatt.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\expmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fastsax.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fileacc.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\filemi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\filterconfig1.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\flashmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\flatmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fop.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\formi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\foruimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fpicker.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fps.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fps_office.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\freebl3.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\frmmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fsstorage.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ftransl.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fwemi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fwimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fwkmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fwlmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\fwmmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\gdiplus.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\gdipluscanvas.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\gomi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\guesslangmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\hatchwindowfactory.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\helplinkermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\hsqldb.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\hwp.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\hyphenmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18nisolang1MSC.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18npapermi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18npool.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18nregexpMSC.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18nsearch.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\i18nutilMSC.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\icdmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\icgmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\icuin40.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\icule40.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\icuuc40.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\idxmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\imemi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\index_data.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\inprocserv.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ipbmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ipdmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ipsmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\iptmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ipxmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\irami.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\itgmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\itimi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\java_uno_accessbridge.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\jdbcmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\js3250.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\ldapbe2.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\legacy_binfiltersmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libcurl.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libdb47.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libeay32.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\librdf.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libtextcat.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libxml2.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libxmlsec-mscrypto.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libxmlsec.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\libxslt.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\lngmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\lnthmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\localebe1.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\localedata_en.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\localedata_es.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\localedata_euro.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\localedata_others.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\logmi.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\lpsolve55.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\mcnttype.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\migrationoo2.uno.dll Win32/Ramnit.H virus
C:\Program Files\OpenOffice.org 3\program\mozabdrvmi.dll Win32/Ramnit.H virus

chuzzle · Aug 29, 2011

Bobbye said:
You're still actively getting malware after 3 weeks of cleaning. We can't get a virus scan, so please do the following- we need to consider that you may have a file infector:

Make sure to use Internet Explorer for this

Please go to VirSCAN.org free on-line scan service

Copy and paste each of the following file paths into the "Suspicious files to scan" box on the top of the page, one at a time:

c:\windows\system32\userinit.exe

c:\windows\explorer.exe

c:\window\system32\svchost.exe

Click on the Upload button

If a pop-up appears saying the file has been scanned already, please select the ReScan button.

Once the Scan is completed, click on the "Copy to Clipboard" button. This will copy the link of the report into the Clipboard.

Paste the contents of the Clipboard in your next reply.

**************

Bobbeye, Here you go: the results from virscan.org:

VirSCAN.org Scanned Report :
Scanned time : 2007/12/18 17:56:20 (GMT)
Scanner results: 3% Scanner(s) (1/36) found malware!
File Name : userinit.exe
File Size : 24576 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : 39b1ffb03c2296323832acbae50d2aff
SHA1 : e5aedcbe25a97c89101f1f3860ff846e94d70445
Online report : http://r.virscan.org/62673f4534c08297ca39ada792786a86

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 3.0.0.126 2007.12.17 2007-12-17 3.50 -
AhnLab V3 2007.12.18.00 2007.12.18 2007-12-18 3.22 -
AntiVir 7.6.0.45 7.0.1.117 2007-12-18 10.48 -
Arcavir 1.0.4 200712180958 2007-12-18 14.54 -
AVAST! 1.0.8 071217-0 2007-12-17 4.00 -
AVG 7.5.49.442 269.17.1/1183 2007-12-13 5.05 -
BitDefender 7.60825.960468 7.16370 2007-12-19 16.07 -
CA (VET) 9.0.0.143 31.3.5385 2007-12-18 10.61 -
ClamAV 0.91.2 5172 2007-12-19 0.21 -
Comodo 2.11 2.0.0.377 2007-12-18 0.83 -
CP Secure 1.1.0.655 2007.12.18 2007-12-18 23.80 -
Dr.Web 4.44.0.9170 2007.12.18 2007-12-18 17.12 -
ewido 4.0.0.2 2007.12.18 2007-12-18 1.98 -
F-Prot 4.4.1.52 20071217 2007-12-17 5.50 -
F-Secure 5.51.6100 2007.12.18.06 2007-12-18 22.40 -
Fortinet 2.81-3.11 8.449 2007-12-03 0.29 -
ViRobot 20071218 2007.12.18 2007-12-18 0.43 -
Ikarus T3.1.01.15 2007.12.18.70010 2007-12-18 1.46 -
JiangMin 10.00.650 2007.12.17 2007-12-17 1.33 -
Kaspersky 5.5.10 2007.12.18 2007-12-18 23.20 -
KingSoft 2007.6.20.249 2007.12.19 2007-12-19 1.41 -
McAfee 5.2.00 5187 2007-12-17 8.22 -
mks_vir 2.01 2007.12.18 2007-12-18 23.59 -
NOD32 2.70.10 2730 2007-12-18 0.01 -
Norman 5.91.08 5.90 2007-12-17 32.34 -
Panda 9.04.03.0001 2007.12.17 2007-12-17 3.12 -
Trend Micro 8.500-1001 4.894.08 2007-12-18 0.04 -
Prevx V2 20071218 2007-12-18 7.65 TROJAN.DOWNLOADER.GEN
Quick Heal 9.00 2007.12.17 2007-12-17 2.66 -
Rising 19.0 20.23.12.00 2007-12-18 1.84 -
Sophos 2.49.1 4.21 2007-12-13 27.54 -
Symantec 1.3.0.24 20071217.003 2007-12-17 0.23 -
nProtect 2007-12-18.00 1094216 2007-12-18 4.84 -
The Hacker 6.2.9 v00162 2007-12-17 1.71 -
VBA32 3.12.2.5 20071218.1224 2007-12-18 7.16 -
VirusBuster 4.3.19:9 9.117.6/11.0 2007-12-18 14.01 -

*************************************************************************

VirSCAN.org Scanned Report :
Scanned time : 2011/07/19 14:04:28 (BST)
Scanner results: Scanners did not find malware!
File Name : explorer.exe
File Size : 1032192 byte
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5 : a0732187050030ae399b241436565e64
SHA1 : 69f33740413da112630be73ebb805a23b69f2f7f
Online report : http://r.virscan.org/a19605ad9cedaacbceed0c762a76ffc9

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 5.1.0.3 20110719205213 2011-07-19 10.43 -
AhnLab V3 2011.07.19.00 2011.07.19 2011-07-19 17.24 -
AntiVir 8.2.6.16 7.11.11.208 2011-07-19 0.53 -
Antiy 2.0.18 20110718.11225872 2011-07-18 0.02 -
Arcavir 2011 201107140423 2011-07-14 0.01 -
Authentium 5.1.1 201107190026 2011-07-19 2.53 -
AVAST! 4.7.4 110719-0 2011-07-19 0.07 -
AVG 8.5.850 271.1.1/3774 2011-07-19 0.27 -
BitDefender 7.90123.8559723 7.38349 2011-07-19 4.23 -
ClamAV 0.97.1 13329 2011-07-19 0.01 -
Comodo 4.0 9429 2011-07-18 10.16 -
CP Secure 1.3.0.5 2011.07.18 2011-07-18 0.00 -
Dr.Web 5.0.2.3300 2011.07.19 2011-07-19 14.01 -
F-Prot 4.6.2.117 20110718 2011-07-18 1.65 -
F-Secure 7.02.73807 2011.07.18.05 2011-07-18 0.21 -
Fortinet 4.2.257 13.455 2011-07-19 0.58 -
GData 22.1346 20110716 2011-07-16 0.11 -
ViRobot 20110719 2011.07.19 2011-07-19 0.41 -
Ikarus T3.1.32.20.0 2011.07.19.78866 2011-07-19 4.67 -
JiangMin 13.0.900 2011.07.18 2011-07-18 19.97 -
Kaspersky 5.5.10 2011.07.19 2011-07-19 0.25 -
KingSoft 2009.2.5.15 2011.7.19.9 2011-07-19 6.01 -
McAfee 5400.1158 6411 2011-07-18 17.99 -
Microsoft 1.7000 2011.07.19 2011-07-19 4.18 -
NOD32 3.0.21 6303 2011-07-18 0.01 -
Norman 6.07.10 6.07.00 2011-07-18 16.57 -
Panda 9.05.01 2011.07.18 2011-07-18 3.33 -
Trend Micro 9.200-1012 8.298.09 2011-07-19 0.04 -
Quick Heal 11.00 2011.07.19 2011-07-19 1.56 -
Rising 20.0 23.67.01.05 2011-07-19 0.40 -
Sophos 3.20.2 4.66 2011-07-19 7.06 -
Sunbelt 3.9.2497.2 9900 2011-07-18 0.78 -
Symantec 1.3.0.24 20110718.017 2011-07-18 0.11 -
nProtect 20110719.01 3568544 2011-07-19 9.55 -
The Hacker 6.7.0.1 v00257 2011-07-18 0.77 -
VBA32 3.12.16.4 20110718.1959 2011-07-18 7.67 -
VirusBuster 5.3.0.4 14.0.129.0/56582802011-07-19 0.00 -

*****************************************************************************************

VirSCAN.org Scanned Report :
Scanned time : 2007/08/23 00:04:49 (BST)
Scanner results: 3% Scanner(s) (1/29) found malware!
File Name : svchost.exe
File Size : 14336 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : 8f078ae4ed187aaabc0a305146de6716
SHA1 : da39a3ee5e6b4b0d3255bfef95601890afd80709
Online report : http://r.virscan.org/8f078ae4ed187aaabc0a305146de6716

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 3.0.0.123 2007.08.22 2007-08-22 5.41 Trojan.Win32.Patched.aa
AntiVir 7.4.1.63 6.39.1.34 2007-08-22 2.32 -
Arcavir 1.0.4 200708221242 2007-08-22 1.17 -
AVAST! 1.0.8 000767-4 2007-08-22 3.04 -
AVG 7.5.48.442 269.12.2/967 2007-08-22 1.39 -
BitDefender 7.60825.814226 7.14452 2007-08-23 2.94 -
CA (VET) 8.4.0.24 31.1.5080 2007-08-22 0.83 -
ClamAV 0.91.1 4032 2007-08-23 0.01 -
Dr.Web 4.33 2007.08.23 2007-08-23 4.74 -
ewido 4.0.0.2 2007.08.22 2007-08-22 2.08 -
F-Prot 3.16.16 2007.08.22 2007-08-22 0.41 -
F-Secure 5.51.6100 2007.08.22.09 2007-08-22 2.40 -
Ikarus T3.1.1.12 2007.08.22.69383 2007-08-22 1.30 -
JiangMin 10.00.650 2007.08.21 2007-08-21 0.70 -
Kaspersky 5.5.10 2007.08.23 2007-08-23 0.03 -
KingSoft 2007.6.20.249 2007.8.22 2007-08-22 0.82 -
McAfee 5.1.00 5103 2007-08-22 0.71 -
mks_vir 2.01 2007.08.23 2007-08-23 1.85 -
NOD32 2.70.8 2476 2007-08-22 0.01 -
Norman 5.91.04 5.90 2007-08-22 3.01 -
Panda 9.00.00 2007.08.22 2007-08-22 4.05 -
Trend Micro 8.500-1001 4.665.00 2007-08-21 0.04 -
Quick Heal 9.00 2007.08.22 2007-08-22 2.21 -
Rising 19.0 19.37.22.00 2007-08-22 1.43 -
Sophos 2.47.0 4.19 2007-08-23 2.81 -
Symantec 1.3.0.24 20070822.009 2007-08-22 0.24 -
nProtect 2007-08-22.01 36942 2007-08-22 9.61 -
VBA32 3.12.2.2 20070822.0417 2007-08-22 0.69 -
VirusBuster 4.3.19:9 9.099.1/11.0 2007-08-22 0.92 -

Bobbye · Aug 29, 2011

I'm sorry but I have bad news for you. You have a Win32/Ramnit.H virus malware infextion. I suspected this, but always hope it's not there.

Win32/Ramnit.A is a file infector with IRCBot functionality which infects .exe, and .HTML/HTM files, and opens a back door that compromises your computer.

Using this backdoor, a remote attacker can access and instruct the infected computer to download and execute more malicious files. The infected .HTML or .HTM files may be detected as Virus:VBS/Ramnit.A. Win32/Ramnit.A!dll is a related file infector often seen with this infection. It too has IRCBot functionality which infects .exe, .dll and .HTML/HTM files and opens a back door that compromises your computer. This component is injected into the default web browser by Worm:Win32/Ramnit.A which is dropped by a Ramnit infected executable file.

-- Note: As with most malware infections, the threat name may be different depending on the anti-virus or anti-malware program which detected it. Each security vendor uses their own naming conventions to identify various types of malware.

With this particular infection the safest solution and only sure way to remove it effectively is to reformat and reinstall the OS.

Why? The malware injects code in legitimate files similar to the Virut virus and in many cases the infected files (which could number in the thousands) cannot be disinfected properly by your anti-virus. When disinfection is attempted, the files often become corrupted and the system may become unstable or irreparable. The longer Ramnit.A remains on a computer, the more files it infects and corrupts so the degree of infection can vary.

Ramnit is commonly spread via a flash drive (usb, pen, thumb, jump) infection where it copies Worm:Win32/Ramnit.A with a random file name. The infection is often contracted by visiting remote, crack and keygen sites. These type of sites are infested with a smörgåsbord of malware and a major source of system infection.

In my opinion, Ramnit.A is not effectively disinfectable, so your best option is to perform a full reformat as there is no guarantee this infection can be completely removed
In most instances it may have caused so much damage to your system files that it cannot be completely cleaned or repaired. Further, your machine has likely been compromised by the backdoor Trojan and there is no way to be sure the computer can ever be trusted again.

Please read:

Whenever a system has been compromised by a backdoor payload, it is impossible to know if or how much the backdoor has been used to affect your system...There are only a few ways to return a compromised system to a confident security configuration. These include:
• Reimaging the system
• Restoring the entire system using a full system backup from before the backdoor infection
• Reformatting and reinstalling the system

Backdoors and What They Mean to You

Important Note:: If your computer was used for online banking, has credit card information or other sensitive data on it, you should disconnect from the Internet until your system is cleaned. All passwords should be changed immediately to to include those used for banking, email, eBay, paypal and any online activities which require a username and password. You should consider them to be compromised. You should change each password using a clean computer and not the infected one. If not, an attacker may get the new passwords and transaction information. Banking and credit card institutions should be notified of the possible security breach. Failure to notify your financial institution and local law enforcement can result in refusal to reimburse funds lost due to fraud or similar criminal activity.

Inactive Removal of win32/zbot.g

chuzzle

Posts: 22 +0

Bobbye

Posts: 16,313 +36

chuzzle

Posts: 22 +0

Bobbye

Posts: 16,313 +36

chuzzle

Posts: 22 +0

chuzzle

Posts: 22 +0

chuzzle

Posts: 22 +0

chuzzle

Posts: 22 +0

Bobbye

Posts: 16,313 +36

Similar threads

Latest posts