How to remove “Midie.74381”?

The Midie.74381 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.74381 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Attempts to connect to a dead IP:Port (1 unique times)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Steals private information from local Internet browsers
• Exhibits behavior characteristic of Pony malware
• Harvests cookies for information gathering
• Harvests credentials from local FTP client softwares

How to determine Midie.74381?

File Info:
name: E20F460522C1F0737C7F.mlw
path: /opt/CAPEv2/storage/binaries/61a9c72fef94dc50d51c791afe7329266b577b94565b702214a59ceea1f8e09a
crc32: 5377999A
md5: e20f460522c1f0737c7fd12d9b316c31
sha1: bec71b650d611f96791f7429b4a0d8c0cb2454cf
sha256: 61a9c72fef94dc50d51c791afe7329266b577b94565b702214a59ceea1f8e09a
sha512: b9d8beb1e45231738c8236330efd12fc1651a5e531da77cada01577a55b0f4e1fa79d2ca9d4b7ecffae13b223ab97d169f465f8fd6a42e8cd2431b02cd46b605
ssdeep: 3072:xFO32iTrGhU4nS08J4P4WLnn0aPXFAmUAK50AxS+hO:bS2iTrAU4nS08J4fLn0aPA9SwS+w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E904D0F5A2E95B33FA0CB2B3D495F8727332F5D056064A5230CC129A8F5B38969E1397
sha3_384: 645677e6c22ab14b0171e4691edef93a24c92122d0f7fbb6091e9fa0ded43d5bceee6811c87b2aba6e3eb4b7ea75227f
ep_bytes: 558bec81eccc000000535657892d90d3
timestamp: 2012-05-12 07:01:18

Version Info:
CompanyName: bhq93888888888 Corporation
FileDescription: CTF Loader
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
InternalName: CTFMON
LegalCopyright: © bhq93888888888 Corporation. All rights reserved.
OriginalFilename: CTFMON.EXE
ProductName: bhq93888888888® Windows® Operating System
ProductVersion: 6.1.7600.16385
OleSelfRegister: D
Translation: 0x0409 0x04b0

Midie.74381 also known as:

How to remove Midie.74381?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.