Virus:Win32/Ramnit.J!remnants (file analysis)

The Virus:Win32/Ramnit.J!remnants is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Virus:Win32/Ramnit.J!remnants virus can do?

Anomalous binary characteristics

How to determine Virus:Win32/Ramnit.J!remnants?


File Info:
crc32: 511B33AF
md5: 1b07f8dbde8fc19ce66bd975eaa3f8f8
name: 1B07F8DBDE8FC19CE66BD975EAA3F8F8.mlw
sha1: 7e32dc73a032aa7167841fac8e355318c6fa019d
sha256: 14220c39ac911d0accb70f79bc136ff393134318215009a2e2d4132ca37adcc5
sha512: b17a848529b4b7d08395958d30b91dfdee32d2489cd8424caec8892a974b006c87ca2ff1dc149da1e55187267da87dd687aad451953e2fa565a0388ebe5fa8c9
ssdeep: 3072:u8xm8KlMW0fyeEQd+ibtV+Slv6etbHuA8aK6GG:tKlVAy+8iZV+Sdtg6GG
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998-2006 ITB CompuPhase
InternalName: libpawnc.dll
FileVersion: 3.2.3664
CompanyName: ITB CompuPhase
ProductName: libpawnc
ProductVersion: 3.2.3664
FileDescription: Pawn Compiler library
OriginalFilename: libpawnc.dll
Translation: 0x0409 0x04e4

Virus:Win32/Ramnit.J!remnants also known as:

CAT-QuickHeal	W32.Ramnit.D
ALYac	Win32.Ramnit.Dam
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.bde8fc
Baidu	Win32.Virus.Nimnul.dam
Cyren	W32/Patched.B!Generic
Symantec	W32.Ramnit.B!inf
ESET-NOD32	a variant of Win32/Ramnit.CH
Zoner	Trojan.Win32.Ramnit.292
Avast	Win32:Ramnit-CC [Trj]
BitDefender	Win32.Ramnit.Dam
NANO-Antivirus	Virus.Win32.Nimnul.bqjjnb
MicroWorld-eScan	Win32.Ramnit.Dam
Tencent	Win32.Virus.Nimnul.Dxdf
Ad-Aware	Win32.Ramnit.Dam
Sophos	ML/PE-A + W32/Patched-I
Comodo	Virus.Win32.Ramnit.OV@3uwchz
BitDefenderTheta	AI:FileInfector.FE0962FA10
McAfee-GW-Edition	W32/Ramnit!trace
FireEye	Generic.mg.1b07f8dbde8fc19c
Emsisoft	Win32.Ramnit.Dam (B)
Avira	W32/Ramnit.C
Antiy-AVL	Trojan/Generic.ASVirus.1EC
Kingsoft	Win32.Infected.AutoInfector.a.(kcloud)
Microsoft	Virus:Win32/Ramnit.J!remnants
GData	Win32.Virus.Nimnul.A
McAfee	W32/Ramnit!trace
MAX	malware (ai score=89)
VBA32	Trojan.Wacatac
Panda	Trj/CI.A
Rising	Virus.Ramnit!1.B97C (CLASSIC)
Ikarus	W32.Ramnit
Fortinet	W32/Ramnit.DAM!tr
AVG	Win32:Ramnit-CC [Trj]
Paloalto	generic.ml

How to remove Virus:Win32/Ramnit.J!remnants?

Virus:Win32/Ramnit.J!remnants removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X