Virus:Win32/Ramnit.A!remnants information

Malware Removal

The Virus:Win32/Ramnit.A!remnants is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Review

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Virus:Win32/Ramnit.A!remnants virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Tries to suspend Cuckoo threads to prevent logging of malicious activity
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz
a.tomx.xyz
fget-career.com

How to determine Virus:Win32/Ramnit.A!remnants?


File Info:

crc32: 54A4E5D6
md5: 4c1aed3638ecfa4ca5c02e8f9e3686ab
name: IDM.v6.xx.release.3-patch.exe
sha1: 149804823577e1733d33e020cd7b7ab3435a4641
sha256: 922104a47af71cbbaecf79d084779f10fe0daf4be575a6ad3bc51be295147684
sha512: 3c142305850060ad9642ae524a46794ba796fb09ee947d3e440941582c3cf5b635c12f4ffb65ce614b331d14ff6fbc1053c31c8809ecdffbf97e677dec72738e
ssdeep: 12288:ht+fi4vNVAEuhHy4ocnOscYpeFenC3QXxD:X+jv09MIp4mC4J
type: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:

0: [No Data]

Virus:Win32/Ramnit.A!remnants also known as:

BkavW32.RammitNNA.PE
MicroWorld-eScanWin32.Ramnit
CAT-QuickHealW32.Ramnit.A
McAfeeW32/Ramnit.a
MalwarebytesHackTool.Agent
ZillyaVirus.Nimnul.Win32.1
K7GWVirus ( 002fe95d1 )
K7AntiVirusVirus ( 002fe95d1 )
ArcabitWin32.Ramnit
TrendMicroPE_RAMNIT.H
BaiduWin32.Virus.Nimnul.a
F-ProtW32/Ramnit.B!Generic
SymantecW32.Ramnit!inf
TotalDefenseWin32/Ramnit.A
TrendMicro-HouseCallPE_RAMNIT.H
ClamAVWin.Trojan.Ramnit-1847
GDataWin32.Virus.Ramnit.C
KasperskyVirus.Win32.Nimnul.a
BitDefenderWin32.Ramnit
NANO-AntivirusVirus.Win32.Nimnul.bpchjo
AegisLabW32.Nimnul.tn4U
AvastWin32:RmnDrp
TencentVirus.Win32.Ramnit.c
Ad-AwareWin32.Ramnit
EmsisoftWin32.Ramnit (B)
ComodoPacked.Win32.MPEC.Gen
F-SecureWin32.Ramnit
DrWebWin32.Rmnet
VIPREVirus.Win32.Ramnit.a (v)
Invinceavirus.win32.ramnit.a
McAfee-GW-EditionBehavesLike.Win32.Ramnit.jh
SophosW32/Patched-I
IkarusTrojan.Graftor
CyrenW32/Ramnit.B!Generic
JiangminWin32/PatchFile.et
WebrootW32.RamNit.Gen
AviraW32/Ramnit.CD
Antiy-AVLVirus/Win32.Nimnul.a
KingsoftWin32.Ramnit.la.30720
Endgamemalicious (high confidence)
ViRobotWin32.Ramnit.E[h]
ZoneAlarmVirus.Win32.Nimnul.a
MicrosoftVirus:Win32/Ramnit.A!remnants
AhnLab-V3Win32/Ramnit.B
ALYacWin32.Ramnit
AVwareVirus.Win32.Ramnit.a (v)
VBA32Virus.Win32.Nimnul.a
ZonerWin32.Ramnit.A
ESET-NOD32Win32/Ramnit.A
RisingVirus.Ramnit!1.9AA5 (classic)
YandexWin32.Ramnit.Gen.3
SentinelOnestatic engine – malicious
FortinetW32/Ramnit.A
AVGWin32/Ramnit.A
PandaW32/Cosmu.gen
CrowdStrikemalicious_confidence_100% (D)
Qihoo-360Virus.Win32.Ramnit.B

How to remove Virus:Win32/Ramnit.A!remnants?

Virus:Win32/Ramnit.A!remnants removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment