Ramnit

Ramnit is a computer worm affecting Windows users. It was estimated that it infected 800 000 Windows PCs between September and December 2011.^[1] The Ramnit botnet was dismantled by Europol and Symantec in 2015.^[2] At its peak in 2015, Ramnit was estimated to have infected 3,200,000 PCs.^[3] Ramnit infects removable media such as USB drives and also hides itself within the master boot record.^[4][5] As soon as it infects a computer, it copies itself to all attached and removable drives. It also searches and infects files with the extensions .exe, .dll, .htm and .html.