Ransom

Generic.Ransom.Magniber.C611C1D6 (file analysis)

Malware Removal

The Generic.Ransom.Magniber.C611C1D6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Magniber.C611C1D6 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Anomalous binary characteristics

Related domains:

redirector.gvt1.com
r8—sn-bpb5oxu-3c2r.gvt1.com

How to determine Generic.Ransom.Magniber.C611C1D6?


File Info:

crc32: 79E3DA7F
md5: 19914c749ad9a79a8365c00ea9b854df
name: 19914C749AD9A79A8365C00EA9B854DF.mlw
sha1: b75a4b49a70e6a731f78f91e9e31521a97f2ac7f
sha256: f56243364d559e275e5eddb009cbb2df56aed85a4eba8642d4b3154161e04e51
sha512: 54483056b950b66a6cc035aacdcc4cb31d31b9b5d05d20d00492cbfe99cbeed6fa75ed9a52078a0362dac8902ffa076132f72a319216c27928d5cf682e923e9a
ssdeep: 384:qro9tAYB8aK2+COc1WzqgzRvbMaOjrB3f5jw2cdYIRpchX95yImbUjT:q+8aKntc1WzqgZMtVdw2calTyyj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Magniber.C611C1D6 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGeneric.Ransom.Magniber.C611C1D6
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.49ad9a
CyrenW32/Magniber.A.gen!Eldorado
APEXMalicious
AvastWin32:DropperX-gen [Drp]
KasperskyUDS:Trojan.Multi.GenericML.xnet
BitDefenderGeneric.Ransom.Magniber.C611C1D6
NANO-AntivirusTrojan.Win32.Ric.hbgkhi
MicroWorld-eScanGeneric.Ransom.Magniber.C611C1D6
Ad-AwareGeneric.Ransom.Magniber.C611C1D6
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaF.34738.bqW@aCCMt5e
VIPRELooksLike.Win32.Crowti.b (v)
TrendMicroTROJ_GEN.R02DC0PFB21
McAfee-GW-EditionBehavesLike.Win32.Generic.mm
FireEyeGeneric.mg.19914c749ad9a79a
EmsisoftGeneric.Ransom.Magniber.C611C1D6 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Dropper.Gen2
eGambitUnsafe.AI_Score_96%
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitGeneric.Ransom.Magniber.C611C1D6
GDataGeneric.Ransom.Magniber.C611C1D6
AhnLab-V3Trojan/Win.JU.R418989
McAfeeGenericRXGC-JU!19914C749AD9
MAXmalware (ai score=81)
VBA32BScope.Trojan.Agentb
MalwarebytesTrojan.Agent
PandaAdware/SecurityProtection
TrendMicro-HouseCallTROJ_GEN.R02DC0PFB21
RisingTrojan.Generic@ML.100 (RDML:4DmwklMMXV55OS6RG6ukyQ)
YandexTrojan.GenAsa!q2PC60Zhsjk
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Magniber.A!tr
AVGWin32:DropperX-gen [Drp]
Paloaltogeneric.ml

How to remove Generic.Ransom.Magniber.C611C1D6?

Generic.Ransom.Magniber.C611C1D6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment