Ransom

About “Generic.Ransom.AmnesiaE.09A4AE3F” infection

Malware Removal

The Generic.Ransom.AmnesiaE.09A4AE3F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.AmnesiaE.09A4AE3F virus can do?

  • Starts servers listening on 127.0.0.1:0
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Uses Windows utilities for basic functionality
  • Attempts to stop active services
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Clears Windows events or logs
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.AmnesiaE.09A4AE3F?


File Info:

crc32: A075AD03
md5: 645d774a869c582b2c46beed455321d4
name: 645D774A869C582B2C46BEED455321D4.mlw
sha1: e94862c25377373f54ce668051df0d95d3746514
sha256: 21420b8630260dae7f0ea14a319a8b3ae6910def98599109b365f710e835b9c4
sha512: 2c7cc053ed79e52f7e2ae508d2d832e6efa0b9a24dc71158fbc25d829c3d9ad8aa8f5c04e7fff94152dacc04cc1d7604da147ee201d900efcbcc62fe95f15b81
ssdeep: 24576:iQleTSYH4w19XgPcFtDEQy1Ogc1GLRQKm76R3tt5cnvxTD4b4nuCqIhjcXZsk:fleTlYwsP6VKK6niJTvuCq0jQZsk
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.AmnesiaE.09A4AE3F also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
SangforTrojan.Win32.Save.a
BitDefenderDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
Cybereasonmalicious.a869c5
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Ouroboros.G
APEXMalicious
ClamAVWin.Ransomware.Vipasana-9783618-1
KasperskyHEUR:Trojan.Win32.Stosek.gen
MicroWorld-eScanDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
Ad-AwareDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
BitDefenderThetaGen:NN.ZexaF.34670.rvW@ayZsknpi
FireEyeDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
EmsisoftDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F (B)
JiangminTrojan.Generic.gtxwb
AviraHEUR/AGEN.1139736
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
GDataDeepScan:Generic.Ransom.AmnesiaE.09A4AE3F
McAfeeGenericRXAA-FA!645D774A869C
MAXmalware (ai score=86)
VBA32BScope.Trojan.Encoder
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazpeHaBo0oj0UjW3FQBtMOK5)
IkarusTrojan-Ransom.Ouroboros
FortinetW32/Ouroboros.G!tr.ransom

How to remove Generic.Ransom.AmnesiaE.09A4AE3F?

Generic.Ransom.AmnesiaE.09A4AE3F removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment