Home / malware

PDF

Win32.Ramnit.G

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Win32.Ramnit.G is also known as Win32/Ramnit.A, Win32.Rmnet, VBS/Ramnit.B, Trojan-Dropper.VBS.Exe2Vbs.b.

Explanation :

This malware is a html file infected by a worm, with a visual basic script.

The script drops file %TEMP%svchost.exe wich is detected as Win32.Ramnit.J, then executes this file.

Last update 21 November 2011

 

TOP