1 Nov 2012 ... However, it is evident that the gang behind Ramnit was not satisfied with its achievement, ... Two MD5s are used to register an infected computer to the C&C server. ... To contact through the named pipe, Modules.dll creates an instance of it by calling ... Rmnsoft.dll acts as the client of the pipe. ... fb.png ...