TrojanSpy:Win32/Ranbyus.C malicious file

The TrojanSpy:Win32/Ranbyus.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanSpy:Win32/Ranbyus.C virus can do?

Anomalous binary characteristics

How to determine TrojanSpy:Win32/Ranbyus.C?


File Info:
crc32: FFC309D9
md5: c605e7fc96ed9424cc25bcb50304f894
name: C605E7FC96ED9424CC25BCB50304F894.mlw
sha1: dbe436a0def2f571b46bef701e6df1bab954489e
sha256: 80eb15846fdb80f02c876dee2bc12f988f11588121a15659a57e786c0d29427b
sha512: 9623d92fa952e4b145805fb6107af99a927e481b0375b3929c90b6e827a477843c455bd05ceb6fb68f4068cc1ea07b31ed530fb152a47a9b059e90c27ad5b876
ssdeep: 3072:x3NE+wZHMJL8OEcSMCsydxwuqtpaB3NE+wZHMJL8OEcSMCsWdxwA:pi+wZsJLpEcS/q65i+wZsJLpEcSJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

TrojanSpy:Win32/Ranbyus.C also known as:

DrWeb	Trojan.PWS.Ibank.268
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.700274
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	TrojanBanker:Win32/Fibbit.c930111d
Cybereason	malicious.c96ed9
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Banker.Win32.Fibbit.vfk
BitDefender	Gen:Variant.Razy.700274
NANO-Antivirus	Trojan.Win32.Ibank.fkqsoi
MicroWorld-eScan	Gen:Variant.Razy.700274
Tencent	Win32.Trojan.Dropper.Svqr
Ad-Aware	Gen:Variant.Razy.700274
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34628.mmZ@aykFfxp
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.dh
FireEye	Generic.mg.c605e7fc96ed9424
Emsisoft	Gen:Variant.Razy.700274 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
Microsoft	TrojanSpy:Win32/Ranbyus.C
Arcabit	Trojan.Razy.DAAF72
AegisLab	Trojan.Win32.Fibbit.4!c
GData	Gen:Variant.Razy.700274
AhnLab-V3	Trojan/Win32.ADH.C94715
McAfee	Artemis!C605E7FC96ED
MAX	malware (ai score=100)
VBA32	TrojanPSW.Ibank
Rising	Dropper.Generic!8.35E (CLOUD)
Ikarus	Trojan-Spy.Win32.Ranbyus
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanPSW.Generic.HxQBEpsA

How to remove TrojanSpy:Win32/Ranbyus.C?

TrojanSpy:Win32/Ranbyus.C removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X