Generic.Ranosm.Maktub.208918DA removal guide

The Generic.Ranosm.Maktub.208918DA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ranosm.Maktub.208918DA virus can do?

• Executable code extraction
• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• A process attempted to delay the analysis task.
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• Performs some HTTP requests
• The binary likely contains encrypted or compressed data.
• The executable is likely packed with VMProtect
• Looks up the external IP address
• Exhibits possible ransomware file modification behavior
• Creates a hidden or system file
• Checks the version of Bios, possibly for anti-virtualization
• Checks the CPU name from registry, possibly for anti-virtualization
• Collects information to fingerprint the system

Related domains:

How to determine Generic.Ranosm.Maktub.208918DA?

File Info:
crc32: 31F60452
md5: 925c84b9a979b42563927a1aa115976b
name: 925C84B9A979B42563927A1AA115976B.mlw
sha1: 0144e44d51e7ff12c70a05f3568cc304727035ac
sha256: d932c82cc9b3be481a7dc6f5422cfdd2b5cf9db6095ab9fc09156be15f5bc671
sha512: a9c2e4c68b31b4003a7c2fbe27bf1c9d05b9d10bc199ff9448502d3e5795bdde7eb4022d8afc922c9682bc2aa78b7b4e4f248cf7b8a74e746d277ae52d2f235e
ssdeep: 12288:z5G1C3ZsrRuCZ4eZmKp7rCtkesLV/Ld1bj2z4JV:zc9uCv3ko1bj2sv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2013
InternalName: ado64
FileVersion: 6.3.3852.6120
CompanyName: Intel Corporation
PrivateBuild: 1
LegalTrademarks: Copyright (C) 2013
Comments: ado64
ProductName: ado64
SpecialBuild: 1
ProductVersion: 6.3.3852.6120
FileDescription: ado64
OriginalFilename: ado64
Translation: 0x0409 0x04b0

Generic.Ranosm.Maktub.208918DA also known as:

How to remove Generic.Ranosm.Maktub.208918DA?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.