Malware

Midie.78222 information

Malware Removal

The Midie.78222 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Midie.78222 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Midie.78222?


File Info:

crc32: 3646E9F3
md5: 12239c1df3392a702bcf5a8fedc9544e
name: 12239C1DF3392A702BCF5A8FEDC9544E.mlw
sha1: cac9c2332894eaed278f412da3d9eba1097b1349
sha256: 179faaa183e9fe1e18de82fab6299d1edb56d87f44c08a639755f0c9b4398451
sha512: b9a588e6a434c68e3fd5a7abe5ead452959228047081c7162a668b2c64fa1ce5031a335672f777c90d3249cfb0a53becece23dc732989456e7a42101ea64923a
ssdeep: 6144:OmUa+SGoAaVZSz58otQvkYRybhlN7H053mXSLYp83RAhc3mbMFmv4RQx83ubpQX:sacoPitsHUtb7H03TP
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: dxdiag.exe
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Microsoft DirectX Diagnostic Tool
OriginalFilename: dxdiag.exe
Translation: 0x0409 0x04b0

Midie.78222 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.36010072
FireEyeGeneric.mg.12239c1df3392a70
ALYacGen:Variant.Midie.78222
CylanceUnsafe
SangforMalware
BitDefenderTrojan.GenericKD.36010072
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZedlaF.34742.qM8@aqjei8bi
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
Ad-AwareTrojan.GenericKD.36010072
SophosML/PE-A + Mal/EncPk-APV
McAfee-GW-EditionArtemis!Trojan
EmsisoftTrojan.GenericKD.36010072 (B)
GDataWin32.Trojan.QBot.NZ36VC
MAXmalware (ai score=89)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
ArcabitTrojan.Generic.D2257858
MicrosoftTrojan:Win32/Qakbot.GA!MTB
CynetMalicious (score: 100)
McAfeeGenericRXAA-AA!12239C1DF339
VBA32BScope.Trojan.Gatak
ESET-NOD32a variant of Win32/Kryptik.HIOM
RisingTrojan.Kryptik!8.8 (TFE:2:ItOo6ejRx2)
FortinetW32/Kryptik.HDNN!tr
AVGWin32:BankerX-gen [Trj]
Qihoo-360HEUR/QVM39.1.6D67.Malware.Gen

How to remove Midie.78222?

Midie.78222 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment