I've been reading the thread on this site with someone who had the same trouble. I did an ESET scan, these are the results. It got all except the one at the bottom and I think explorer.exe is important. So would that mean I'm unable to get rid of the malware? Oh and I don't know ComboFix.
Results of ESETscan:
Please I really would rather do things without having to uninstall and reformat.
C:\Documents and Settings\All Users\Application Data\DivX\Setup\DefaultBanner\defaultbanner-en-us.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\hi\Installation-Page_LinkScanner.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\hi\Installation-Page_Smart-Scanning.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\hi\Installation-Page_Social-Networking.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\us\Installation-Page_LinkScanner.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\us\Installation-Page_Smart-Scanning.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\mkt\us\Installation-Page_Social-Networking.html Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\htmlayout.dll Win32/Ramnit.C virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_cz.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_da.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_es.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_fr.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_ge.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_hu.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_id.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_in.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_it.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_jp.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_ko.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_ms.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_nl.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_pb.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_pl.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_pt.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_ru.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_sc.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_sk.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_sp.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_tr.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_us.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_zh.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\All Users\Application Data\MFAData\pack\license_zt.htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\0VG101W1\online-scanner[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\0VG101W1\Sync[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\0VG101W1\topic87058[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\3OW4902A\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\3OW4902A\index[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\3OW4902A\JS[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\3OW4902A\show[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\3OW4902A\xmlProxy[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\79CT44WP\videoad[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\EIDJOMZ9\2[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\EIDJOMZ9\iframe[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\EIDJOMZ9\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\EIDJOMZ9\index[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\GXDE17MN\url[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\J0OI9CEJ\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\J0OI9CEJ\imgres[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\J0OI9CEJ\X-Men_Animated_Series[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\JMTKS18S\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\JMTKS18S\index[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\deliver2[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\InboxLight[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\likebox[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\show[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\KPO6MVY7\show[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\MLY6Q3SH\JS[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\MLY6Q3SH\px[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O07CFKDS\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O07CFKDS\index[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O07CFKDS\index[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O07CFKDS\likebox[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O28NG1IW\xd_receiver[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O28NG1IW\xd_receiver[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O2J6NJCI\forums[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O2J6NJCI\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O2J6NJCI\proxy[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\O2J6NJCI\redtube_com[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\P21H457N\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\P21H457N\imgres[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\P21H457N\index[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\P21H457N\index[2].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S212K12I\ADTECH;adid=5651966;bnid=-1;target=_blank;sub1=5651973;misc=[timestamp][1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S212K12I\like[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S212K12I\topic137369[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S212K12I\xd_receiver[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S2L023SD\CASUQ983.HTM Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S2L023SD\mcad[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\S2L023SD\Messenger[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SM2412ZE\likebox[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SM2412ZE\Re-+Mother[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SM2412ZE\topic336927-30[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SM2412ZE\videoad[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SW8PL91H\c=211_rand=538641713_pv=y_rt=ifr_ct=y[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SW8PL91H\HistoryFrame[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SW8PL91H\microsoft_management_console[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SW8PL91H\topic34773[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\SW8PL91H\tweet_button[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\ad[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\imgres[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\index[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\LocalStorage[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\megavideo_com[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\T7MFM3KL\topic114351[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\Local Settings\Temporary Internet Files\Content.IE5\XXMO5HJS\JS[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\Documents and Settings\computer\My Documents\My Music\other music\Oedipus.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan cleaned - quarantined
C:\Documents and Settings\computer\My Documents\My Music\Rock\One step Closer.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan cleaned - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S58Q2S9T\77t[1].htm Win32/Ramnit.A virus cleaned - quarantined
C:\WINDOWS\ExplorerSrv.exe Win32/Ramnit.A virus unable to clean
Edited by Elusival, 19 October 2010 - 11:43 PM.