Trojan.Ranapama.JE removal instruction

The Trojan.Ranapama.JE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ranapama.JE virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Trojan.Ranapama.JE?

File Info:
name: 15ECE89EEF9910797221.mlw
path: /opt/CAPEv2/storage/binaries/f237bfdd46384bca00c8d22311c5d348a41fb41aad9aba6c59d035ae9b80441c
crc32: F67C54A5
md5: 15ece89eef9910797221128fc9c98291
sha1: 7e861c1729058b937d9799389eed02f18ff3f483
sha256: f237bfdd46384bca00c8d22311c5d348a41fb41aad9aba6c59d035ae9b80441c
sha512: fa975fff570dd95f971023acd7288db13ccade9aebe4f061862d7b456a64d2a68b69fa06df6c6d64e34b4e14d1d5c4b780edbab858581d38d260a7f1f6722b6b
ssdeep: 1536:Hvl4iY3nWWrL7Qe25xjlU47I0m93i6E2i:94iWC5xjlr7I1i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T171A392BF7F090472DA64663022F7C3CA02666C195F4BA54BA60477B92DE3E440D7EB1B
sha3_384: ea510e8ebe4bf7518c54ad5ce55bb48d9dfe5c8f9f15e761f386963ebf7267b220d3ebeb78f7a389991c510c4827ef44
ep_bytes: 6878124000e8eeffffff000000000000
timestamp: 2012-07-25 06:52:50

Version Info:
Translation: 0x0409 0x04b0
Comments: Reseam candida
CompanyName: Reseam candida
FileDescription: Reseam candida
LegalCopyright: Reseam candida
LegalTrademarks: Reseam candida
ProductName: Reseam candida
FileVersion: 8.74
ProductVersion: 8.74
InternalName: coperchio
OriginalFilename: coperchio.exe

Trojan.Ranapama.JE also known as:

How to remove Trojan.Ranapama.JE?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.