Trojan

Trojan.Win32.Ramnit.eap removal

Malware Removal

The Trojan.Win32.Ramnit.eap is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Ramnit.eap virus can do?

  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
redirector.gvt1.com
r8—sn-bpb5oxu-3c2r.gvt1.com

How to determine Trojan.Win32.Ramnit.eap?


File Info:

crc32: 700E7390
md5: bce40700a139bc25c811b31cf96c389c
name: BCE40700A139BC25C811B31CF96C389C.mlw
sha1: d73774caa348c940d9e0ff2a5a4a5156a470b848
sha256: 1069778abeefdf59bffdcf116369fe13ef4ff19348d9e07d340740da09fc6eea
sha512: afd83804de0c247a990bd1fb8824ba1fbbd2599ad29921e2c20c38c9ce61e6dfb5dc02e882c383fb11783b7c74ee13f042d0db532f08e6f7445c55dbdbbffd22
ssdeep: 3072:ifyAMrGrDocr+ui0my4VFuRex5h7zOWpJdhlROWz9TI0nqpTzZUAwohm8e:mMCrJFODLx5VzOWHlrz9UMVye
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: dfogdofgb.exe
FileVersion: 1.0.0.2
Translation: 0x0809 0x04b0

Trojan.Win32.Ramnit.eap also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053d5971 )
Elasticmalicious (high confidence)
DrWebWin32.HLLM.Reset.482
CynetMalicious (score: 100)
ALYacTrojan.GenericKDZ.47315
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.1513483
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaTrojan:Win32/Ramnit.b9e2b4a4
K7GWTrojan ( 0053d5971 )
Cybereasonmalicious.0a139b
CyrenW32/GandCrab.Z.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GKUD
APEXMalicious
AvastFileRepMalware
KasperskyTrojan.Win32.Ramnit.eap
BitDefenderTrojan.GenericKDZ.47315
NANO-AntivirusTrojan.Win32.Ramnit.fifcjj
ViRobotTrojan.Win32.U.GandCrab.172544
MicroWorld-eScanTrojan.GenericKDZ.47315
TencentWin32.Trojan.Inject.Auto
Ad-AwareTrojan.GenericKDZ.47315
SophosMal/Generic-R + Mal/Kryptik-CV
ComodoTrojWare.Win32.TrojanSpy.Ursnif.EM@7vyz23
BitDefenderThetaGen:NN.ZexaF.34722.mu0@amEHMIoG
TrendMicroTROJ_DYER.BME
McAfee-GW-EditionBehavesLike.Win32.Emotet.cc
FireEyeGeneric.mg.bce40700a139bc25
EmsisoftTrojan.GenericKDZ.47315 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Ramnit.kd
AviraHEUR/AGEN.1106537
Antiy-AVLTrojan/Generic.ASMalwS.281386E
MicrosoftTrojan:Win32/Skeeyah.A!rfn
AegisLabTrojan.Win32.Ramnit.4!c
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan-Ransom.GandCrab.N
AhnLab-V3Win-Trojan/MalPe36.Suspicious.X2037
Acronissuspicious
McAfeeTrojan-FQPW!BCE40700A139
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.GandCrypt
MalwarebytesRansom.GandCrab
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_DYER.BME
RisingTrojan.Generic@ML.100 (RDML:N35fOvm75pgKkLiPI4cOcQ)
YandexTrojan.GenAsa!jWMnuIRmV+k
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GMSM!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan.Win32.Ramnit.eap?

Trojan.Win32.Ramnit.eap removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment