Categories: Malware

Heur.Minggy.4 malicious file

The Heur.Minggy.4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Minggy.4 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Heur.Minggy.4?


File Info:
name: F1BACE3DF961508388BD.mlwpath: /opt/CAPEv2/storage/binaries/5d5d672a615783f14a9c34bf3d11c823e734e50a1eec3e24c118ab39c4ff1c10crc32: 9B89DA2Emd5: f1bace3df961508388bdba0b5f8b59e3sha1: 88f36746a4e704b082364d78cf671dff4401f3bdsha256: 5d5d672a615783f14a9c34bf3d11c823e734e50a1eec3e24c118ab39c4ff1c10sha512: 01f382f8f22dceb98c3767a6649ed65a4a6384355070077612388a2a658b36bf83a995caee006cd0461ef4cce161c4c53ebc90e862ce3c1117e88642e950e14assdeep: 1536:kY+K5Dn5IiYBCrTfXMxfLw3awEupQEAGlWkbBEP2ePmYj0Sz:v5Dn5FrraZQQYlWkdE7uYYSztype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18E63473329B138F7F91206307D82C2B11AA3DB3E2B65D67F90B3D1689822D61B9DC574sha3_384: 3f0aaed5a853b310a50b8edf02d2d5b8484088e5f06365bb1d207785a85d9779df87f2f14480683de5801f4d42ab3b40ep_bytes: 5589e583ec08c7042402000000ff154ctimestamp: 2012-12-25 16:41:36
Version Info:
CompanyName: FileVersion: FileDescription: InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: ProductVersion: Translation: 0x041c 0x04e4

Heur.Minggy.4 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Spambot.11349
ClamAV	Win.Trojan.Inject-124
FireEye	Generic.mg.f1bace3df9615083
CAT-QuickHeal	Trojan.Ransom.A
McAfee	Injection Dropper.B
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveton.a (v)
Sangfor	Trojan.Win32.Generic.ky
K7AntiVirus	Trojan ( 0040f03f1 )
Alibaba	VirTool:Win32/CeeInject.893da50a
K7GW	Trojan ( 0040f03f1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.34212.eC0@aOA3YAoi
Cyren	W32/Zbot.IF.gen!Eldorado
Symantec	Trojan.Ransomlock!g41
ESET-NOD32	Win32/Injector.AANZ
TrendMicro-HouseCall	TROJ_RANSOM.SMCB
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Minggy.4
NANO-Antivirus	Trojan.Win32.Jorik.bgctql
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
MicroWorld-eScan	Gen:Heur.Minggy.4
Tencent	Win32.Trojan.Generic.Ectu
Ad-Aware	Gen:Heur.Minggy.4
Sophos	Mal/Generic-R + Mal/EncPk-AGE
Comodo	TrojWare.Win32.Injector.fn@4tj2ip
Zillya	Trojan.Injector.Win32.407288
TrendMicro	TROJ_RANSOM.SMCB
McAfee-GW-Edition	BehavesLike.Win32.Trojan.kc
Emsisoft	Gen:Heur.Minggy.4 (B)
Ikarus	Virus.Win32.CeeInject
GData	Gen:Heur.Minggy.4
Jiangmin	Trojan/Jorik.geeh
Webroot	W32.Malware.Gen
Avira	TR/Obfuscate.advmna
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Kingsoft	Win32.Troj.Jorik..(kcloud)
Arcabit	Trojan.Minggy.4
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	VirTool:Win32/CeeInject.gen!HL
AhnLab-V3	Trojan/Win32.Inject.R47312
Acronis	suspicious
VBA32	Trojan.EA.01671
ALYac	Gen:Heur.Minggy.4
MAX	malware (ai score=100)
Malwarebytes	Trojan.Agent
APEX	Malicious
Rising	Trojan.Mingc!1.660C (C64:YzY0Or+nA8Fvkus5)
Yandex	Trojan.GenAsa!D9sfH/woZ+o
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Zbot.AAU!tr
Cybereason	malicious.df9615
Panda	Trj/Genetic.gen
MaxSecure	Trojan.Malware.5143819.susgen