CommonMagic Malware


CommonMagic is another example of a stealthy Trojan Horse threat that seeks to infect users’ computers and add them to its botnet. CommonMagic is distributed via misleading web messages such as spam emails and links sent to the user via social network chats.

CommonMagic 1024x473

Threats like CommonMagic can be incredibly dangerous because they can be concealed in many places on the Internet and can compromise your computer without any notification. Torrents, spam letters, and their attachments, different free software packages and apps, infected websites are all favorite locations where Trojans can hide. Hackers could also include these viruses in seemingly harmless adverts, or so-called malvertisements, which are in reality fake and only lead to web addresses that spread different viruses. No matter how the PC became infected with this virus, the infection most likely happened stealthily without any evidence or visible symptoms. Only a few people will be able to detect a Trojan horse, which is normally an invisible intruder and that will normally happen with the help of very strong and reliable antivirus software. Fortunately, on this page, we have such software that can automatically and professionally detect CommonMagic for you and remove it. We also have a manual removal guide that can help you deal with CommonMagic, so if you are in trouble, make sure you check it out.

The CommonMagic Malware

A threat like the CommonMagic malware could be used for several different purposes, none of which will do good to your computer. The first more general way that the CommonMagic malware can affect your computer is by making modifications to its settings and eventually corrupting it.

The hackers who are in control can use their malware to crash the system, delete some of your favorite files, manipulate some data on your PC without your knowledge or even steal some sensitive information. Another possible use of a threat like CommonMagic or Trojan Win32/Casdet rfn is to distribute other viruses and to insert them inside the compromised computer. The role of the Trojan, in this case, would be to exploit the system’s weaknesses and security vulnerabilities in order to sneak Ransomware, Spyware, or other harmful code into the computer without the victim’s knowledge. Hackers can often use a Trojan to steal your private information by keeping track of your keystrokes, or by secretly and remotely monitoring your device and watching you through your webcam. This is one of the most disturbing ways this type of malware can harass you. 

That’s why, if such an infection is found in your system, it should be removed. You can do that by following a few manual removal steps which we have prepared for you on this page. Or, you may have to use the help of professional software to effectively delete this threat. Whatever you want to do to get rid of this Trojan, make sure you concentrate on prevention after that. Try to stay away from dangerous websites, questionable software installers and unreliable messages, emails, and attachments. Additionally, don’t click on intrusive advertisements or banners and you will reduce the risk of landing a threat like CommonMagic on your computer again.


Danger Level High (Trojans are often used as a backdoor for Ransomware)
Symptoms The presence of a Trojan in the system can hardly be detected without the help of professional software since there usually are no visible symptoms of its activity.
Distribution MethodUsers may get infected with Trojans when they interact with malicious email attachments, click on infected web links and ads or download and install cracked software.
Detection Tool

Remove CommonMagic Malware

If you are looking for a way to remove CommonMagic you can try this:

  1. Click on the Start button in the bottom left corner of your Windows OS.
  2. Go to Control Panel -> Programs and Features -> Uninstall a Program.
  3. Search for CommonMagic and any other unfamiliar programs.
  4. Uninstall CommonMagic as well as other suspicious programs.

Note that this might not get rid of CommonMagic completely. For more detailed removal instructions follow the guide below.

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website's users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Drag and Drop File Here To Scan
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.

    After you open their folder, end the processes that are infected, then delete their folders. 

    Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 



    Hold together the Start Key and R. Type appwiz.cpl –> OK.



    You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:





    Type msconfig in the search field and hit enter. A window will pop-up:



    Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

    • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

    Hold the Start Key and R –  copy + paste the following and click OK:

    notepad %windir%/system32/Drivers/etc/hosts

    A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

    hosts_opt (1)


    If there are suspicious IPs below “Localhost” – write to us in the comments.



    Type Regedit in the windows search field and press Enter.

    Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

    • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
      HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
      HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

    If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

    About the author


    Brandon Skies

    Brandon is a researcher and content creator in the fields of cyber-security and virtual privacy. Years of experience enable him to provide readers with important information and adequate solutions for the latest software and malware problems.

    Leave a Comment