Categories: Malware

How to remove “Midie.44905”?

The Midie.44905 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.44905 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Midie.44905?


File Info:
name: F11F9D800E0130517DF7.mlwpath: /opt/CAPEv2/storage/binaries/8950245d79791801a362ba281622227d9425023152fcd15f2bea3a7c132d3d5bcrc32: 4E28FDD8md5: f11f9d800e0130517df79e019dbae757sha1: b9055d16e6a24d9bf829d63b4a370b70cd1ce84asha256: 8950245d79791801a362ba281622227d9425023152fcd15f2bea3a7c132d3d5bsha512: 130bf2e5213f90507b1137d61a22ea99ad7e636776c7f85277208d312a15959502613384f5e2c67021cefb8377f989535c6079d3858f310ad9d52201301e463cssdeep: 12288:K+jLu7E4a7mqKoe0YlmaKUtErmladU0G+OLz+C:fLuYD7mqKoe0T0deUWPCtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19AC4B0537440C0A8FE6910F27316859433A9DCBBDA18A24A6BC823579FF5BE1193F71Bsha3_384: 85ad4c6ae75e468c1c1c1852215bd00a54b8514025b6d47c0fbe7977e5a7cc92803bc1c64e7d1f6e3749a387c49f1bd3ep_bytes: e87c600000e989feffff8bff558bec83timestamp: 2014-12-05 20:25:05
Version Info:
Comments: CompanyName: EFT SoftwareFileDescription: HH Tune ProsFileVersion: 2, 0, 1, 8InternalName: HD Tune ProLegalCopyright: Copyright (C) 2018LegalTrademarks: OriginalFilename: HDTunePro.EXEPrivateBuild: ProductName: HD Tune ProProductVersion: 5, 8, 0, 2SpecialBuild: Translation: 0x0409 0x04b0

Midie.44905 also known as:

Lionic	Trojan.Win32.Zbot.m6l9
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.44905
FireEye	Generic.mg.f11f9d800e013051
CAT-QuickHeal	Worm.Gamarue.WR5
ALYac	Gen:Variant.Midie.44905
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.TorrentLocker.A
K7AntiVirus	Trojan ( 0055e3ef1 )
Alibaba	Ransom:Win32/Teerac.bba154b0
K7GW	Trojan ( 0055e3ef1 )
Cybereason	malicious.00e013
VirIT	Trojan.Win32.Dropper.LD
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.TorrentLocker.A
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Dropper.Win32.Agent.pegx
BitDefender	Gen:Variant.Midie.44905
NANO-Antivirus	Trojan.Win32.Encoder.dnxohy
SUPERAntiSpyware	Ransom.CryptoLocker/Variant
Tencent	Win32.Trojan.Inject.Auto
Ad-Aware	Gen:Variant.Midie.44905
Sophos	Mal/Generic-R + Troj/HkMain-CN
Comodo	Malware@#1poiqztb1w3wm
DrWeb	Trojan.Encoder.761
Zillya	Trojan.Scarsi.Win32.1805
TrendMicro	TROJ_FILECODER.N
McAfee-GW-Edition	Trojan-FFST!F11F9D800E01
Emsisoft	Gen:Variant.Midie.44905 (B)
Ikarus	Trojan-Ransom.CryptoLocker
GData	Gen:Variant.Midie.44905
Jiangmin	TrojanDropper.Agent.btgg
Webroot	W32.Ctblocker
Avira	HEUR/AGEN.1244192
Antiy-AVL	Trojan/Win32.Scarsi
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Midie.DAF69
ZoneAlarm	Trojan-Dropper.Win32.Agent.pegx
Microsoft	Ransom:Win32/Teerac.A
AhnLab-V3	Win-Trojan/Ndvia.104960
Acronis	suspicious
McAfee	Trojan-FFST!F11F9D800E01
MAX	malware (ai score=100)
VBA32	BScope.Trojan.KillFiles
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/RansomCrypt.C
TrendMicro-HouseCall	TROJ_FILECODER.N
Rising	Trojan.DL.Win32.Wauchos.s (CLOUD)
Yandex	Trojan.GenAsa!4CJ1eGbPZnM
Fortinet	W32/Injector.BUTP!tr
BitDefenderTheta	Gen:NN.ZexaF.34212.Iq0@ay2A0Cbi
AVG	Win32:Teerac-I [Trj]
Avast	Win32:Teerac-I [Trj]
CrowdStrike	win/malicious_confidence_100% (W)