Home Malware Programs Trojans TrojanSpy:Win32/Ranbyus.N

TrojanSpy:Win32/Ranbyus.N

Posted: December 1, 2014

Threat Metric

Threat Level: 9/10
Infected PCs: 63
First Seen: December 1, 2014
Last Seen: September 8, 2022
OS(es) Affected: Windows

TrojanSpy:Win32/Ranbyus.N is detected by various anti-malware and anti-virus programs to be a trojan. Typically, trojans such as TrojanSpy:Win32/Ranbyus.N are distributed via spam e-mail campaigns that send e-mails with corrupted attachments from unknown senders, mostly marked with high priority. TrojanSpy:Win32/Ranbyus.N collects data related to users' browsing habits and preferences. Moreover, the overall performance of your system may be significantly lower, and this is most evident when you start the system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



<startup folder>\system check.lnk File name: <startup folder>\system check.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
<system folder>\smiauftnfdmohp.exe File name: <system folder>\smiauftnfdmohp.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list
Loading...