Categories: Worm

Worm:Win32/Ramnit removal

The Worm:Win32/Ramnit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Ramnit virus can do?

Presents an Authenticode digital signature
Unusual version info supplied for binary

How to determine Worm:Win32/Ramnit?


File Info:
crc32: 0DDE5125md5: 71896573256e6fc746a6819c21701779name: 71896573256E6FC746A6819C21701779.mlwsha1: f7cdf163618a2a43be9f4983d1b5120cddc51736sha256: e1b28927a0a3ed377a0c88b3e33d9859faac93d0c516898693a95a80faa741f3sha512: 8054503f75533ea51f19c5f20d14fac38c0a79ba7c00880eb5d91c8450e13e5f49e15a824a723abc46188eecd56a79d392a0ca2586852e221587f6564a63790dssdeep: 12288:xkDB21/SsVIMrD6GFe6jhguSI7zuzeMb01JQntLOCToR/QaXXU8UQd:x40/SsVIIDhyzemToFQaXk8htype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: setup.exeFileVersion: 16.0.30530.185 built by: D16.8CompanyName: ProductName: ProductVersion: 16.0.30530.185FileDescription: SetupOriginalFilename: setup.exeTranslation: 0x0409 0x04b0

Worm:Win32/Ramnit also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( f1000f011 )
Elastic	malicious (high confidence)
DrWeb	VBS.Dropper.128
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Ramnit.MUE.R4
ALYac	Gen:Variant.Zbot.13
Cylance	Unsafe
Zillya	Trojan.Katusha.Win32.50929
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Ramnit.6b49aae4
K7GW	Trojan ( f1000f011 )
Cybereason	malicious.a30f43
Baidu	Win32.Trojan.Ramnit.f
Cyren	W32/Ramnit.UNAX-1410
Symantec	Backdoor.Matsnu
ESET-NOD32	Win32/Ramnit.A
Zoner	Trojan.Win32.33102
APEX	Malicious
TotalDefense	Win32/Ramnit.NFTMJbB
Avast	Win32:GenMalicious-GOW [Trj]
ClamAV	Win.Trojan.Generic-53
Kaspersky	Packed.Win32.Krap.hm
BitDefender	Gen:Variant.Zbot.13
NANO-Antivirus	Trojan.Win32.ULPM.emffym
ViRobot	Trojan.Win32.Agent.56320.BJ
MicroWorld-eScan	Gen:Variant.Zbot.13
Tencent	Virus.Win32.Ramnit.efg
Ad-Aware	Gen:Variant.Zbot.13
Sophos	ML/PE-A + Mal/Agent-IE
Comodo	MalCrypt.Indus!@1qrzi1
BitDefenderTheta	Gen:NN.ZexaF.34628.dmKfai9SVGnc
VIPRE	Packed.Win32.Zbot.gen.y.5 (v)
TrendMicro	BKDR_QAKBOT.SMC
FireEye	Generic.mg.7955baea30f436e7
Emsisoft	Gen:Variant.Zbot.13 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Win32/Virut.bv
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_100%
Kingsoft	Win32.Troj.Krap.hm.(kcloud)
Microsoft	Worm:Win32/Ramnit
Gridinsoft	Backdoor.Win32.Ramnit.zv!s2
GData	Gen:Variant.Zbot.13
AhnLab-V3	Virus/Win32.Ramnit.R205005
Acronis	suspicious
McAfee	PWS-Zbot.gen.pq
MAX	malware (ai score=82)
VBA32	Malware-Cryptor.Win32.073
Malwarebytes	Generic.Trojan.Malicious.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	BKDR_QAKBOT.SMC
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazp98WlGXwuZkoLX2lEZB/N/)
Yandex	Trojan.GenAsa!laR2HrZxPuw
Ikarus	Virus.Win32.Ramnit
Fortinet	W32/Dropper.C3FC!tr
AVG	Win32:GenMalicious-GOW [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Virus.Ramnit.HwsB1LgA