Malware

About “Win32:Ramnit-BN [Trj]” infection

Malware Removal

The Win32:Ramnit-BN [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:Ramnit-BN [Trj] virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32:Ramnit-BN [Trj]?


File Info:

crc32: F3A8B4D2
md5: ab6def636f0d5c013bc21f0eccd04caf
name: AB6DEF636F0D5C013BC21F0ECCD04CAF.mlw
sha1: e38cab67cb59d529d5c1ec4c9a180099331b6cb0
sha256: 0ea81b326e8c4f8f24b8b4e31b366b7e239242b2666501bd24b6dc9b49d8e926
sha512: 9bb6ad400ec99651e059c302bbfc46379c8ea96a99736112eeaab5ac1d0c9ca129a1ecb83c8e96494e33675b000fa8df588c935ff4eb05bf395df228e28c44c3
ssdeep: 1536:h5Hlpp48Zd0lo+4EMMyO3OexOSEowTwBjzvcmJoxDN6IoI2aa2q:h5HWlI/HUOjSiToj7Cvk2q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32:Ramnit-BN [Trj] also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 003c36381 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.Ransom.Cerber.1
CylanceUnsafe
ZillyaTrojan.Ransom.Win32.1361
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Vundo.ffd2cfb5
K7GWTrojan ( 003c36381 )
Cybereasonmalicious.36f0d5
CyrenW32/Zbot.DX.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Ramnit-BN [Trj]
ClamAVWin.Trojan.Agent-1344700
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Ransom.Cerber.1
NANO-AntivirusTrojan.Win32.Offend.fhczwq
MicroWorld-eScanTrojan.Ransom.Cerber.1
TencentWin32.Trojan.Generic.Lnyb
Ad-AwareTrojan.Ransom.Cerber.1
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34684.gqX@aeMx10ki
FireEyeGeneric.mg.ab6def636f0d5c01
EmsisoftTrojan.Ransom.Cerber.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Generic.arysc
AviraW32/Sality.DQ
eGambitUnsafe.AI_Score_96%
MicrosoftProgram:Win32/Unwaders.C!rfn
GDataTrojan.Ransom.Cerber.1
AhnLab-V3Trojan/Win32.Crypt.R228556
Acronissuspicious
McAfeeGenericRXFW-AM!AB6DEF636F0D
MAXmalware (ai score=100)
MalwarebytesMalware.AI.1938341249
PandaTrj/Genetic.gen
RisingTrojan.Win32.Fednu.uaz (CLOUD)
YandexTrojan.GenAsa!fmOUWpudT0Q
IkarusVirus.Win32.Vundo
FortinetW32/Generic.AC.165D7!tr
AVGWin32:Ramnit-BN [Trj]
Paloaltogeneric.ml

How to remove Win32:Ramnit-BN [Trj]?

Win32:Ramnit-BN [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment