Categories: Trojan

Trojan:Win32/Ramnit.F information

The Trojan:Win32/Ramnit.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Ramnit.F virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Norwegian (Bokmal)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Ramnit.F?


File Info:
name: 626A17176B20F4FF8346.mlwpath: /opt/CAPEv2/storage/binaries/3bc127de1df4d3dd23cff504f2881c44aa1bf4c335d079e3ca47d3e5cac5389ecrc32: D9090071md5: 626a17176b20f4ff83460c7b1df5400fsha1: 0ab90983227aa427df8a91598169ccfba86f4ce5sha256: 3bc127de1df4d3dd23cff504f2881c44aa1bf4c335d079e3ca47d3e5cac5389esha512: 030bf8b59338484731f60c5bf6af91695960f923d2b757463af8cde1237ace0c65f43940c0c34f5fece60e9c28132245f45b6a985c7d2bd0e5e98a968172ab84ssdeep: 1536:rh8Zc0c2TUH53F/y8fnFZTd6Ue6IWVvmfYC+zyl+U8/6O:l8Zc0hAH53F/y0nzTd6UjIWVvn+otype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B183C06355B672CEF8B2AF3E82E61D02CB4AB241836F845D15C2210F0904FD65E9FFA5sha3_384: 70abb9ba5a14dbee1876123bfdc3e334cd751158d2b4f609b791d8d6cdb1374e5df4f39eeaff94291f05d67ccfdb9665ep_bytes: 558bec83ec24893424687c4940008914timestamp: 2006-04-23 20:51:07
Version Info:
CompanyName: Macromedia, Inc.FileDescription: Macromedia Flash Player 7.0  r19FileVersion: 7,0,19,0InternalName: Macromedia Flash Player 7.0LegalCopyright: Copyright © 1996-2003 Macromedia, Inc.LegalTrademarks: Macromedia Flash PlayerOriginalFilename: SAFlashPlayer.exeProductName: Shockwave FlashProductVersion: 7,0,19,0Translation: 0x0409 0x04b0

Trojan:Win32/Ramnit.F also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.lkue
MicroWorld-eScan	Trojan.Agent.BPRQ
ClamAV	Win.Packed.Ramnit-9946126-0
FireEye	Generic.mg.626a17176b20f4ff
CAT-QuickHeal	W32.Virut.G
ALYac	Trojan.Agent.BPRQ
Zillya	Trojan.Ramnit.Win32.4078
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0047bf9a1 )
K7GW	Trojan ( 0047bf9a1 )
Cybereason	malicious.76b20f
VirIT	Trojan.Win32.Cryptic.EBU
Cyren	W32/Ramnit.H.gen!Eldorado
Symantec	Packed.Protexor!gen1
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Ramnit.X
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.BPRQ
NANO-Antivirus	Trojan.Win32.Facebook.flltyq
SUPERAntiSpyware	Trojan.Agent/Gen-ShieldFace
Avast	Win32:Virtu-G [Inf]
Rising	Worm.Win32.Koobface.ji (CLASSIC)
Ad-Aware	Trojan.Agent.BPRQ
Emsisoft	Trojan.Agent.BPRQ (B)
Comodo	TrojWare.Win32.Spy.Zbot.WEBA@4min4f
DrWeb	Trojan.Rmnet.1
VIPRE	Trojan.Agent.BPRQ
TrendMicro	TROJ_RAMNIT.SMD
McAfee-GW-Edition	BehavesLike.Win32.Infected.mm
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + W32/Ramnit-BM
Ikarus	Virus.Win32.Heur
GData	Trojan.Agent.BPRQ
Jiangmin	Trojan/Lebag.iq
Webroot	W32.Trojan.Ramnit.Gen
Avira	TR/Crypt.XPACK.Gen2
Antiy-AVL	Trojan/Generic.ASMalwS.3303
Arcabit	Trojan.Agent.BPRQ
ViRobot	Worm.Win32.A.Net-Koobface.197632
Microsoft	Trojan:Win32/Ramnit.F
Google	Detected
AhnLab-V3	Trojan/Win32.Krap.R27995
McAfee	W32/Ramnit.y
MAX	malware (ai score=81)
VBA32	Heur.Trojan.Hlux
Malwarebytes	Malware.AI.3305750983
TrendMicro-HouseCall	TROJ_RAMNIT.SMD
Tencent	Trojan.Win32.Ramnit.a
Yandex	Trojan.GenAsa!bqvDTpij54g
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.QSV!tr
BitDefenderTheta	AI:FileInfector.C2A5779617
AVG	Win32:Virtu-G [Inf]
Panda	Trj/Pck_Pretorx.A
CrowdStrike	win/malicious_confidence_100% (W)