W32/Ramnit.E

By GoldSparrow in Trojans

Threat Scorecard

Ranking:	10,676
Threat Level:	90 % (High)
Infected Computers:	282

First Seen:	September 21, 2011
Last Seen:	July 27, 2023
OS(es) Affected:	Windows

W32/Ramnit.E is a dangerous Trojan infection that infects Windows executable files and HTML files and tries to enable remote attackers gain access to the targeted PC. W32/Ramnit.E opens a back door by connecting to a remote server. With the help of this back door, remote attackers can instruct the compromised PC to download and execute files. W32/Ramnit.E drops some malicious files and makes other changes in the corrupted system. W32/Ramnit.E creates an invisible default web browser process and injects code to it. W32/Ramnit.E and back door functionality appears in the web browser process context, most likely in an attempt to bypass a firewall. Delete W32/Ramnit.E as quickly as possible.

File System Details

W32/Ramnit.E may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Temp%\a75wef8e0e7.exe
Name: %Temp%\a75wef8e0e7.exe Type: Executable File Group: Malware file
2.	%Temp%\02c9c3c35bdx5.exe
Name: %Temp%\02c9c3c35bdx5.exe Type: Executable File Group: Malware file
3.	%Temp%\2010yo.exe
Name: %Temp%\2010yo.exe Type: Executable File Group: Malware file
4.	%Temp%\alerfa.exe
Name: %Temp%\alerfa.exe Type: Executable File Group: Malware file
5.	%Temp%\aqfitrlxi2.exe
Name: %Temp%\aqfitrlxi2.exe Type: Executable File Group: Malware file
6.	%Temp%\8gmsed-bd.exe
Name: %Temp%\8gmsed-bd.exe Type: Executable File Group: Malware file
7.	%Temp%\al3erfa3.exe
Name: %Temp%\al3erfa3.exe Type: Executable File Group: Malware file
8.	%Temp%\1iowieoo.exe
Name: %Temp%\1iowieoo.exe Type: Executable File Group: Malware file
9.	%Temp%\aler3fa.exe
Name: %Temp%\aler3fa.exe Type: Executable File Group: Malware file
10.	%Temp%\alerfa322.exe
Name: %Temp%\alerfa322.exe Type: Executable File Group: Malware file
11.	%Temp%\56493.exe
Name: %Temp%\56493.exe Type: Executable File Group: Malware file
12.	%Temp%\ae0965a7157cd.exe
Name: %Temp%\ae0965a7157cd.exe Type: Executable File Group: Malware file
13.	%Temp%\17dkf.exe
Name: %Temp%\17dkf.exe Type: Executable File Group: Malware file
14.	%Temp%\472a10e2ebxd9.exe
Name: %Temp%\472a10e2ebxd9.exe Type: Executable File Group: Malware file
15.	%Temp%\alerfa2.exe
Name: %Temp%\alerfa2.exe Type: Executable File Group: Malware file

Registry Details

W32/Ramnit.E may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\Software\Win32/ramnit.gen!A

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

W32/Ramnit.E

Threat Scorecard

EnigmaSoft Threat Scorecard

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen