Home / malware

PDF

Virus:VBS/Ramnit.gen!B

First posted on 08 March 2012.
Source: Microsoft

Aliases :

There are no other names known for Virus:VBS/Ramnit.gen!B.

Explanation :

Virus:VBS/Ramnit.gen!B is a VBScript that is injected into other files, for example, HTML files, by variants of Win32/Ramnit. It contains an encoded executable.


Top

Virus:VBS/Ramnit.gen!B is a VBScript that is injected into other files, for example, HTML files, by variants of Win32/Ramnit. It contains an encoded executable that may be detected as Trojan:Win32/Ramnit.

The user is only prompted to run the encoded executable if the HTML file is locally loaded.

The executable may be saved as "%TEMP%\vsexplore.exe".



Analysis by Chris Stubbs

Last update 08 March 2012

 

TOP