How to remove “Win32/PSW.Legendmir.NMD”?

The Win32/PSW.Legendmir.NMD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/PSW.Legendmir.NMD virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/PSW.Legendmir.NMD?


File Info:
name: F857D0F883780D8EE774.mlw
path: /opt/CAPEv2/storage/binaries/ac277dbab24f0a0e4aae7a426be21b50246a873233b732da2c9ca773cf7b23d9
crc32: 7032A1BD
md5: f857d0f883780d8ee77451fa16904177
sha1: f943a992d55d73d624b7c20517b6ca7f2585c7c2
sha256: ac277dbab24f0a0e4aae7a426be21b50246a873233b732da2c9ca773cf7b23d9
sha512: eaed4692343139272619385a85c25e83bcfa6776352848e61b11147a42bf28204f7f668e8b0a926a9017580510ed0810e9150ba179e5f79c1c094743eb4c8d83
ssdeep: 6144:C/iUEajdMJyFRe6at+eH9BpoxJI3ANJuBN0PDGxWSqqcfrj8XzL/3upuqsx:E52JylYEZNJuzVrcX8GWx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T183A41A22E2FD4431F1B316705EB584A4AA777E6C2D31965F22C8B20F5DBADC19D68332
sha3_384: 1f64c674e0b57425e7b4f31a5d437f180cae004c16ab8031254cff04444dd8da4aa32e9ec25f26ec532037f6efbea0ea
ep_bytes: feffffba05010000e8a0fdffff8d45e8
timestamp: 2013-12-17 20:10:26

Version Info:
0: [No Data]

Win32/PSW.Legendmir.NMD also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Hupigon.l5wR
MicroWorld-eScan	Gen:Variant.Ulise.324703
FireEye	Gen:Variant.Ulise.324703
ALYac	Gen:Variant.Ulise.324703
Cylance	Unsafe
Zillya	Trojan.Legendmir.Win32.5267
K7AntiVirus	Password-Stealer ( 0055ec371 )
Alibaba	Virus:Win32/Philis.1028
K7GW	Password-Stealer ( 0055ec371 )
Cyren	W32/Legendmir.W.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.Legendmir.NMD
APEX	Malicious
ClamAV	Win.Trojan.Lmir-22
BitDefender	Gen:Variant.Ulise.324703
Avast	Win32:Delf-AFC [Trj]
Tencent	Win32.Trojan.Generic.Eddn
Ad-Aware	Gen:Variant.Ulise.324703
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Virus
Emsisoft	Gen:Variant.Ulise.324703 (B)
Ikarus	Trojan-Spy.Lmir
GData	Gen:Variant.Ulise.324703
MAX	malware (ai score=84)
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	GenericRXQW-NI!F857D0F88378
Malwarebytes	Malware.AI.4075216139
TrendMicro-HouseCall	TROJ_GEN.R053H0CKR21
Rising	Virus.Viking!1.A181 (CLASSIC)
Yandex	Trojan.PWS.Legendmir!3sKdEl+l0Go
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Legendmir.NMD!tr.pws
AVG	Win32:Delf-AFC [Trj]

How to remove Win32/PSW.Legendmir.NMD?

Win32/PSW.Legendmir.NMD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X