Ransom

Generic.Ransom.AmnesiaE.55087598 removal tips

Malware Removal

The Generic.Ransom.AmnesiaE.55087598 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.AmnesiaE.55087598 virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Starts servers listening on 127.0.0.1:0
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Attempts to stop active services
  • Modifies boot configuration settings
  • Installs itself for autorun at Windows startup
  • Clears Windows events or logs
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

Related domains:

api.my-ip.io
apps.identrust.com
crl.identrust.com
x1.c.lencr.org
r3.o.lencr.org

How to determine Generic.Ransom.AmnesiaE.55087598?


File Info:

crc32: 726C22B7
md5: 689c2fe103ad3708cb9c575202d4c3e0
name: 689C2FE103AD3708CB9C575202D4C3E0.mlw
sha1: 2ea1b19f512421bd9ec100f3415e48c4c3471bc7
sha256: 1f8547b6ac5e2c291f6e09496eb85f215f48d4da9483368531fb07c8a19f8542
sha512: 102d65ed4b38344a9edf19217a35ccb897ecd6a597f5c6db33c29089c674ce5316df06016e7289123665615672c3e83791d8b88de9c12d1827e511538e2bdfac
ssdeep: 24576:vyUwYwd1Xw/EFdaoQbdWriDqDqeCN9xq6u6A1XO88I8ttgcsrQhVq+mnUMif6:aUrw8oUDkA9w6wHx8dCQho+aUMif6
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.AmnesiaE.55087598 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Encoder.34144
CynetMalicious (score: 99)
ALYacDeepScan:Generic.Ransom.AmnesiaE.55087598
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
K7GWTrojan ( 005789501 )
Cybereasonmalicious.103ad3
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.Ouroboros.G
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Vipasana-9783618-1
KasperskyHEUR:Trojan.Win32.Stosek.gen
BitDefenderDeepScan:Generic.Ransom.AmnesiaE.55087598
NANO-AntivirusTrojan.Win32.Stosek.ivcvkt
MicroWorld-eScanDeepScan:Generic.Ransom.AmnesiaE.55087598
TencentMalware.Win32.Gencirc.11c2ae93
Ad-AwareDeepScan:Generic.Ransom.AmnesiaE.55087598
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34796.rvW@aGGUJQpi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.VOIDCRYPT.SM
McAfee-GW-EditionGenericRXON-UG!689C2FE103AD
FireEyeDeepScan:Generic.Ransom.AmnesiaE.55087598
EmsisoftDeepScan:Generic.Ransom.AmnesiaE.55087598 (B)
JiangminTrojan.Generic.gtxwb
AviraHEUR/AGEN.1139736
Antiy-AVLTrojan/Generic.ASCommon.1B2
MicrosoftTrojan:Win32/Glupteba!ml
ZoneAlarmHEUR:Trojan-Ransom.Win32.Generic
GDataDeepScan:Generic.Ransom.AmnesiaE.55087598
TACHYONRansom/W32.Spyro.1342464
AhnLab-V3Ransomware/Win.VOIDCRYPT.C4454770
McAfeeGenericRXON-UG!689C2FE103AD
MAXmalware (ai score=87)
VBA32Trojan.Stosek
MalwarebytesRansom.VoidCrypt
TrendMicro-HouseCallRansom.Win32.VOIDCRYPT.SM
YandexTrojan.Filecoder!BlA8CMjXWYc
IkarusTrojan-Ransom.Ouroboros
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Ouroboros.G!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Qihoo-360Win32/Ransom.Amnesia.HwoCjoQA

How to remove Generic.Ransom.AmnesiaE.55087598?

Generic.Ransom.AmnesiaE.55087598 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment