Malware

Win64/Packed.Themida.K suspicious removal instruction

Malware Removal

The Win64/Packed.Themida.K suspicious is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win64/Packed.Themida.K suspicious virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win64/Packed.Themida.K suspicious?



File Info:

crc32: 4EFD965B
md5: 9612b0aee41a76bd170647601aa15a6a
name: 9612B0AEE41A76BD170647601AA15A6A.mlw
sha1: 5892040f4e38614fb38d28250b3bf73dc920f240
sha256: 485c0400127ce66d5b763acb43181c399eb15608240b08e1253120429792628a
sha512: 1a877b1717858e83feadff464ab84cc6412fc617de54783d7f4a07ce40d9aefdcfe7f52fe6a9390ec49f774931d947d1608669eec107d9500a47c97afebf9f55
ssdeep: 196608:UYEtrk4V18s2t1uPVq5HKPuGGJ3QFn0HStYpdJs/1ulut1joKzO51pJfi327I1F9:UYp4Vct4Mvrt9ytYpwwlQjvz41jfi32m
type: PE32+ executable (GUI) x86-64, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: xa9Firefox and Mozilla Developers; available under the MPL 2 license.
Assembly Version: 1.0.0.0
InternalName: Firefox
FileVersion: 81.0.1.0
CompanyName: Mozilla Corporation
LegalTrademarks: Firefox is a Trademark of The Mozilla Foundation.
Comments: 
ProductName: Firefox
ProductVersion: 1.0.0.0
FileDescription: Firefox
OriginalFilename: Firefox

Win64/Packed.Themida.K suspicious also known as:

K7AntiVirusTrojan ( 00579ee01 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.46550770
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaTrojan:Win32/Themida.2cda668c
K7GWTrojan ( 00579ee01 )
Cybereasonmalicious.f4e386
CyrenW64/Trojan.YTHY-0052
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Packed.Themida.K suspicious
APEXMalicious
AvastWin64:Malware-gen
KasperskyTrojan.Win32.Agent.xahzlv
BitDefenderTrojan.GenericKD.46550770
MicroWorld-eScanTrojan.GenericKD.46550770
Ad-AwareTrojan.GenericKD.46550770
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win64.Trojan.wc
FireEyeGeneric.mg.9612b0aee41a76bd
EmsisoftTrojan.GenericKD.46550770 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.XPACK.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftTrojan.Heur!.032100A3
AegisLabTrojan.Win64.Agentb.trtl
GDataTrojan.GenericKD.46550770
McAfeeArtemis!9612B0AEE41A
MAXmalware (ai score=84)
VBA32Trojan.Agent
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H0CFS21
IkarusTrojan.Crypt
FortinetRiskware/Agent
AVGWin64:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win64/Trojan.Generic.H8oAK7sA

How to remove Win64/Packed.Themida.K suspicious?

Win64/Packed.Themida.K suspicious removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment