Home / malware

PDF

Trojan:Win32/Ramnit

First posted on 30 December 2011.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Ramnit.

Explanation :

Trojan:Win32/Ramnit is part of a family of multi-component malware that infects Windows executable files, Microsoft Office files, and HTML files. Trojan:Win32/Ramnit is the detection for the file that executes viruses that spread via removable drives, and steal sensitive information such as saved FTP credentials and browser cookies.


Top

Trojan:Win32/Ramnit is part of a family of multi-component malware that infects Windows executable files, Microsoft Office files, and HTML files. Trojan:Win32/Ramnit is the detection for the file that executes viruses that spread via removable drives, and steal sensitive information such as saved FTP credentials and browser cookies.

Trojan:Win32/Ramnit often arrives disguised as a valid application, for example:

• AntiVir Command Line Scanner for Windows
• Common File Format Explorer
• Flash Player 6.0
• Hex Workshop
• Java(TM) Platform SE binary
• Macromedia Flash Player 6.0
• Macromedia Flash Player 7.0
• Macromedia Flash Player 8.0
• Visual Assist X

For more information about this threat, please refer to the Win32/Ramnit family description.



Analysis by Jireh Sanico

Last update 30 December 2011

 

TOP