Home / malware

PDF

Virus:VBS/Ramnit.A

First posted on 18 August 2010.
Source: SecurityHome

Aliases :

There are no other names known for Virus:VBS/Ramnit.A.

Explanation :

Virus:VBS/Ramnit.A is a detection for the HTML files infected by Virus:Win32/Ramnit.A.
Top

Virus:VBS/Ramnit.A is a detection for the HTML files infected by Virus:Win32/Ramnit.A. The infected HTML files have an appended VB script at the end of the file. When the infected HTML file is loaded by web browser, the VB script may drop a copy of Worm:Win32/Ramnit.A to %temp%\svchost.exe, then execute it.

Analysis by Chun Feng

Last update 18 August 2010

 

TOP