Categories: Ransom

Generic.Ransom.AmnesiaE.4685843F removal tips

The Generic.Ransom.AmnesiaE.4685843F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.AmnesiaE.4685843F virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Starts servers listening on 127.0.0.1:0
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
Uses Windows utilities for basic functionality
Attempts to stop active services
Modifies boot configuration settings
Installs itself for autorun at Windows startup
Clears Windows events or logs
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

api.my-ip.io

apps.identrust.com

crl.identrust.com

How to determine Generic.Ransom.AmnesiaE.4685843F?


File Info:
crc32: C45B3A15md5: 51fd05fa1ff6631a2eb929677e0156e1name: 51FD05FA1FF6631A2EB929677E0156E1.mlwsha1: a21e07517c61d11c3bf85768e77981f591fe6f75sha256: 162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4sha512: 2cc92cd023295ca62333f5de64d3360800363c690b0f9707e50ffe3d696c2a429a57088f1293eff34b315ce6f7470efbfa870dbc427911bc050b0353fbf06aaassdeep: 24576:uB+mjykAz5oSMF8xjPkdhMlxg4IlcHklaL6QtBgRcypt6saUJDXbQcB8iD4:Ij9AtPUle6tjk0bQcBxDtype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Generic.Ransom.AmnesiaE.4685843F also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.Ransom.AmnesiaE.4685843F
McAfee	Artemis!51FD05FA1FF6
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.D1
K7AntiVirus	Trojan ( 005785c51 )
BitDefender	DeepScan:Generic.Ransom.AmnesiaE.4685843F
K7GW	Trojan ( 005785c51 )
Cybereason	malicious.a1ff66
Cyren	W32/Trojan.APFN-3988
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Trojan-gen
ClamAV	Win.Ransomware.Vipasana-9783618-1
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/Ouroboros.252bb8ce
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.Filecoder!8.68 (CLOUD)
Ad-Aware	DeepScan:Generic.Ransom.AmnesiaE.4685843F
Emsisoft	DeepScan:Generic.Ransom.AmnesiaE.4685843F (B)
F-Secure	Heuristic.HEUR/AGEN.1139736
DrWeb	Trojan.Encoder.33514
McAfee-GW-Edition	BehavesLike.Win32.BadFile.th
FireEye	DeepScan:Generic.Ransom.AmnesiaE.4685843F
Sophos	Mal/Generic-S
Ikarus	Trojan-Ransom.Ouroboros
Avira	HEUR/AGEN.1139736
Antiy-AVL	Trojan[Ransom]/Win32.Odveta.gen
Microsoft	Trojan:Win32/Ymacco.AA16
Gridinsoft	Ransom.Filecoder.B.vl!yf
Arcabit	DeepScan:Generic.Ransom.AmnesiaE.D478013F
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	DeepScan:Generic.Ransom.AmnesiaE.4685843F
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34590.rvW@aOqD4eii
ALYac	Trojan.Ransom.VoidCrypt
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	a variant of Win32/Filecoder.Ouroboros.G
TrendMicro-HouseCall	TROJ_GEN.R002H09BP21
Tencent	Win32.Trojan.Filecoder.Swvd
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Generic.G!tr
Webroot	W32.Malware.Gen
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (W)