Malware

Midie.75618 malicious file

Malware Removal

The Midie.75618 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.75618 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Midie.75618?


File Info:

name: 19D9B180DD6F8390A48C.mlw
path: /opt/CAPEv2/storage/binaries/049a63f06621fc9772d998edaf41adedd29060f0f28c2276e1896e2de016f9fe
crc32: F913E95B
md5: 19d9b180dd6f8390a48c018ada45378d
sha1: a9d030ffb51865ed8a5dfa7bfecd03ea7156914c
sha256: 049a63f06621fc9772d998edaf41adedd29060f0f28c2276e1896e2de016f9fe
sha512: fc94ede6d2f17485776dfc5ffa5bf75f9afd120e0e9aa211c0913445cb5e876db9ea28e88182b62c814215895f501ca2de7a24bed1bd5afc816719ff7a608c93
ssdeep: 1536:PRqk3NPrhOaZk1GDGe0Pdb+d6DiUYot00gwX:wOrDzDDypy6DiUru0gE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17314BD166586395AD49FBF3232B7EDB048A65DD415C6808E23860BDB3CD0901E3B6DFB
sha3_384: 1d43ab82a693c9ea602321c3764bda352572b1177c53b5917a4d85183efb6b4482485ffe56238586a0629ddac4fafea0
ep_bytes: 68ac124000e8eeffffff000058000000
timestamp: 2010-09-18 07:50:11

Version Info:

Translation: 0x0409 0x04b0
ProductName: ksmNY
FileVersion: 5.33
ProductVersion: 5.33
InternalName: ksmNY
OriginalFilename: ksmNY.exe

Midie.75618 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Midie.75618
ClamAVWin.Packed.Tiggre-9859590-0
FireEyeGeneric.mg.19d9b180dd6f8390
CAT-QuickHealWorm.WbnaMF.S28430785
SkyhighBehavesLike.Win32.VBObfus.cm
McAfeeVBObfus
MalwarebytesGeneric.Malware.AI.DDS
ZillyaWorm.WBNAGen.Win32.7
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 001a326f1 )
K7GWP2PWorm ( 001a326f1 )
Cybereasonmalicious.fb5186
BaiduWin32.Worm.VB.al
VirITTrojan.Win32.Generic.SIT
SymantecW32.Changeup!gen10
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/AutoRun.VB.UA
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.WBNA.ipa
BitDefenderGen:Variant.Midie.75618
NANO-AntivirusTrojan.Win32.WBNA.csfhjf
AvastWin32:WormX-gen [Wrm]
TencentWorm.Win32.Wbna.wh
TACHYONWorm/W32.WBNA.200704.B
EmsisoftGen:Variant.Midie.75618 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Autoruner1.35863
VIPREGen:Variant.Midie.75618
TrendMicroWORM_ESFURY.SMA
SophosMal/SillyFDC-D
IkarusWorm.Win32.Vobfus
GDataGen:Variant.Midie.75618
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLWorm/Win32.WBNA.gen
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.VBKrypt.2@22yg5l
ArcabitTrojan.Midie.D12762
ZoneAlarmWorm.Win32.WBNA.ipa
MicrosoftWorm:Win32/Vobfus!pz
VaristW32/Vobfus.I.gen!Eldorado
AhnLab-V3Win-Trojan/VBKrypt.RP03.X1850
BitDefenderThetaAI:Packer.6F89640120
ALYacGen:Variant.Midie.75618
MAXmalware (ai score=85)
VBA32TScope.Trojan.VB
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallWORM_ESFURY.SMA
RisingWorm.Autorun!8.50 (TFE:3:AMCHQRBuEDJ)
YandexTrojan.VBKrypt.Gen
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.5496659.susgen
FortinetW32/VBObfus.CJX!tr
AVGWin32:WormX-gen [Wrm]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Midie.75618?

Midie.75618 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment