Booting into Safe Mode prevents the malware from running its main processes.
Ramnit actively tries to disable security software and block online virus scanners to protect itself. Removal Of W32-Ramnit Is Now Possible
If the infection has been active on your computer for more than a few hours, your system files are likely compromised beyond repair. Booting into Safe Mode prevents the malware from
Do not back up any executable ( .exe ), program library ( .dll ), or web ( .html ) files, as they are likely carrying the virus and will reinfect your fresh system. program library ( .dll )