Malware

What is “Midie.100920”?

Malware Removal

The Midie.100920 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.100920 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Midie.100920?


File Info:

name: B501EFDD0FFD05C9DB02.mlw
path: /opt/CAPEv2/storage/binaries/792155a6f83e9986ce4c471e77bc7fb91f7e404b5fe078c6608c5cd1f1d4d192
crc32: E5BB6C74
md5: b501efdd0ffd05c9db0216d519b630cb
sha1: 0db34ebd35185fc338426a9d332f283987cc54d5
sha256: 792155a6f83e9986ce4c471e77bc7fb91f7e404b5fe078c6608c5cd1f1d4d192
sha512: b454fdd7d9c64389277b3a4b9152d52b4571e038aeb844d539a90378bdb4666ddabc390fd9bf42c871c0f95894efca86fb2cfb30c98a7348f1eb13370b90ddb8
ssdeep: 768:dbkZ9ZcJrxjbTaeAUwjcgkl4Ux8evK+K19:Na0pxjbDAUwjcb4U2ee9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T156034A061D3D6723EE8E5BF49A16C1663B335C8581342B27A107FA3C9B76A3E1987213
sha3_384: 684c12b3e5c3ca0dc9a4d8721aa214e68fd3ed61f7a00d81be00bc1af1f08578d475609628d1fdf329401ee3268e03e8
ep_bytes: 5589e583ec08c7042402000000ff1530
timestamp: 2012-12-12 19:15:19

Version Info:

0: [No Data]

Midie.100920 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Midie.100920
FireEyeGeneric.mg.b501efdd0ffd05c9
CAT-QuickHealVirtool.CeeInject.EG
ALYacGen:Variant.Midie.100920
MalwarebytesTrojan.Winlock
VIPRETrojan.Win32.Reveton.a (v)
K7AntiVirusTrojan ( 0040f03f1 )
BitDefenderGen:Variant.Midie.100920
K7GWTrojan ( 0040f03f1 )
Cybereasonmalicious.d0ffd0
CyrenW32/Buzus.W.gen!Eldorado
SymantecPacked.Generic.397
ESET-NOD32a variant of Win32/Injector.AADO
TrendMicro-HouseCallTROJ_RANSOM.SMCB
KasperskyTrojan-PSW.Win32.Fareit.afl
NANO-AntivirusTrojan.Win32.Fareit.ezgwwm
RisingMalware.Heuristic!ET#97% (RDMK:cmRtazr77i5Cq9TlvP60RMxFOtZK)
SophosML/PE-A + Troj/Ransom-LN
ComodoTrojWare.Win32.PWS.ZBot.ATB@4sozjf
DrWebTrojan.DownLoad3.18038
TrendMicroTROJ_RANSOM.SMCB
SentinelOneStatic AI – Malicious PE
EmsisoftGen:Variant.Midie.100920 (B)
APEXMalicious
JiangminTrojan/PSW.Fareit.sl
MAXmalware (ai score=81)
Antiy-AVLTrojan/Generic.ASMalwS.178CFF
MicrosoftVirTool:Win32/CeeInject.gen!HL
GDataGen:Variant.Midie.100920
CynetMalicious (score: 100)
AhnLab-V3Spyware/Win32.Zbot.R46407
McAfeePWS-Zbot.gen.atb
VBA32Trojan.EA.01671
PandaTrj/Genetic.gen
TencentMalware.Win32.Gencirc.10cd2f3d
YandexTrojan.GenAsa!5s93EvI/ynA
IkarusVirus.Win32.CeeInject
FortinetW32/Zbot.AAU!tr
AVGWin32:Injector-AXQ [Trj]
AvastWin32:Injector-AXQ [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Midie.100920?

Midie.100920 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment