Generic.Ransom.KillRabit.1F03A3BF (file analysis)

The Generic.Ransom.KillRabit.1F03A3BF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Ransom.KillRabit.1F03A3BF virus can do?

Network activity detected but not expressed in API logs

How to determine Generic.Ransom.KillRabit.1F03A3BF?


File Info:
crc32: 3AA278D9
md5: 16e4d19b3259b6adb8c971af290a433a
name: 16E4D19B3259B6ADB8C971AF290A433A.mlw
sha1: d6138ed49c39210d79c8f7e1eef4117b913e7aac
sha256: 9654ec1a30d09f03fd8e2bddc6129b8f0ea2514212f77aef77f69f8521be8fe8
sha512: 6c12e57ca0de52a222d5b54032e85e6fb6bb4d56b8d1fe03173bda67386ce43ad2f353fc85b0d0e9a02eddf2b3693a21def0ffd8880bd42f7f9df8f53b85c5b4
ssdeep: 12288:kCdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBga6TrkmQ:kCdxte/80jYLT3U1jfsWaKrkmQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0809 0x04b0

Generic.Ransom.KillRabit.1F03A3BF also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00544cda1 )
DrWeb	Trojan.MulDrop6.37395
Cynet	Malicious (score: 100)
ALYac	Generic.Ransom.KillRabit.1F03A3BF
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Ransom:Win32/CryptedAutoIt.e0ffdffb
K7GW	Trojan ( 00544cda1 )
Cybereason	malicious.b3259b
Symantec	Trojan.Gen.MBT
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Script:SNH-gen [Trj]
Kaspersky	HEUR:Trojan.Script.Generic
BitDefender	Generic.Ransom.KillRabit.1F03A3BF
NANO-Antivirus	Trojan.Win32.Filecoder.fqqkik
MicroWorld-eScan	Generic.Ransom.KillRabit.1F03A3BF
Ad-Aware	Generic.Ransom.KillRabit.1F03A3BF
Sophos	Mal/Generic-R + Mal/AutoIt-AK
Comodo	Malware@#myr4nw68cf4o
BitDefenderTheta	AI:Packer.866A1D7924
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.ch
FireEye	Generic.Ransom.KillRabit.1F03A3BF
Emsisoft	Generic.Ransom.KillRabit.1F03A3BF (B)
Microsoft	Trojan:Win32/Predator!ml
ZoneAlarm	HEUR:Trojan.Script.Generic
GData	Generic.Ransom.KillRabit.1F03A3BF (2x)
AhnLab-V3	Malware/Win32.Generic.C3276061
McAfee	RDN/Ransom
MAX	malware (ai score=99)
VBA32	Trojan.MulDrop
Malwarebytes	Trojan.Downloader.AutoIt
Panda	Trj/CI.A
Ikarus	Trojan-Ransom.Autoit
Fortinet	Riskware/Dloader
AVG	Script:SNH-gen [Trj]
Paloalto	generic.ml

How to remove Generic.Ransom.KillRabit.1F03A3BF?

Generic.Ransom.KillRabit.1F03A3BF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X