Ramnit is a computer worm affecting Windows users. It was estimated that it infected 800 000 Windows PCs between September and December 2011.[1] The Ramnit botnet was dismantled by Europol and Symantec in 2015.[2] At its peak in 2015, Ramnit was estimated to have infected 3,200,000 PCs.[3] Ramnit infects removable media such as USB drives and also hides itself within the master boot record.[4][5] As soon as it infects a computer, it copies itself to all attached and removable drives. It also searches and infects files with the extensions .exe, .dll, .htm and .html.

References

edit
  1. ^ "Ramnit Goes Social". Seculert. 5 January 2012. Archived from the original on 18 March 2013.
  2. ^ "EU police operation takes down malicious computer network".
  3. ^ "Europol takedown of Ramnit botnet frees 3.2 million PCs from cybercriminals' grasp". Naked Security.
  4. ^ "McAfee Win32/Ramnit.a".
  5. ^ "Symantec Win32.Ramnit". Archived from the original on November 26, 2018.