Intrusion PreventionRamnit.Botnet
Description
This indicates that the system might be infected by the Ramnit botnet. All botnet signatures from FortiOS 5.6 onwards are under IPS, and have their default action set to "Block".
Affected Products
Any unprotected Windows system is vulnerable to the attack.
Impact
Attackers can gain control over the victim system
Recommended Actions
Apply anti-virus protection to vulnerable systems.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 25532 |
| Created | Jul 28, 2011 |
| Updated | Dec 02, 2024 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Malware |