We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Ramnit.gen!A
Aliases: Win-Trojan/Ramnit.163897 (AhnLab) W32/Ramnit.H.gen!Eldorado (Command) Packed.Win32.Krap.ar (Kaspersky) PWS-Zbot.gen.di (McAfee) Worm.Win32.Undef.pe (Rising AV) Troj/Krap-AA (Sophos) Packed.Protexor!gen1 (Symantec)
Summary
Trojan:Win32/Ramnit.gen!A is a generic detection for a trojan component of the Win32/Ramnit family. The malware uses the infection function of certain variants of Virus:Win32/Ramnit famiy, for example, Virus:Win32/Ramnit.AB.
The trojan spreads by infecting files with certain file extensions. It also injects code into certain processes, and communicates with a remote server to receive certain instructions.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
