Worm

How to remove “Worm.Mira”?

Malware Removal

The Worm.Mira is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.Mira virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

How to determine Worm.Mira?


File Info:

crc32: F3D508C3
md5: 5bb04e59709e1d7190333fbcc50f23d9
name: 5BB04E59709E1D7190333FBCC50F23D9.mlw
sha1: 3bcffe7705e9b043a047837d45d4fff01247b0ca
sha256: 6def9d0131bd36c911d6d14aeac1b8d294e1a2f8b8874087fcc79d1002ebdda4
sha512: 34adcc6209053e800e6f7395cfc4a9a2ec3305011d9d22f385c3b6e6b8dc0a16832cd21387ac200cd9753da9f542311b8015797b3f67d13d93ae9c7cbaaf5b7a
ssdeep: 12288:71/aGLDCMNpNAkoSzZWD8ayX2M7Cw7D03CLQxhdpABeHQBEwA:71/aGLDCM4D8ayGMuXkDfA
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Worm.Mira also known as:

BkavW32.FamVT.MiraVM.Worm
K7AntiVirusTrojan ( 0056560b1 )
DrWebWin32.HLLO.Siggen.5
MicroWorld-eScanTrojan.GenericKD.40578669
McAfeeW32/Worm-GAT!5BB04E59709E
CylanceUnsafe
ZillyaTrojan.Agent.Win32.530055
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaMalware:Win32/Dorpal.ali1000029
K7GWTrojan ( 004993691 )
Cybereasonmalicious.9709e1
TrendMicroWORM_MIRAS.SMN
BaiduWin32.Worm.Mira.c
CyrenW32/TrojanP.B
SymantecW32.SillyFDC
ESET-NOD32Win32/Mira.A
APEXMalicious
TotalDefenseWin32/Tnega.MFcdAFD
AvastWin32:Malware-gen
ClamAVWin.Trojan.Agent-1388655
GDataWin32.Worm.Mira.D
KasperskyTrojan.Win32.Agent.icgh
BitDefenderTrojan.GenericKD.40578669
NANO-AntivirusTrojan.Win32.Zusy.ethqlz
ViRobotTrojan.Win32.Mira.741847
TencentWorm.Win32.Mira.a
Ad-AwareTrojan.GenericKD.40578669
SophosW32/Mira-B
ComodoWorm.Win32.Mira.AA@59ticr
F-SecureTrojan.TR/Zusy.BQ
BitDefenderThetaGen:NN.ZexaF.34110.HyZ@aKopAmpi
VIPREWorm.Win32.Mira.a (v)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Worm.hh
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.5bb04e59709e1d71
EmsisoftTrojan.GenericKD.40578669 (B)
SentinelOneDFI – Malicious PE
F-ProtW32/TrojanP.B
Endgamemalicious (high confidence)
WebrootW32.Gen.Bt
AviraTR/Zusy.BQ
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.Agent.icgh
MicrosoftWorm:Win32/Mira!rfn
JiangminTrojan/Agent.iezf
ArcabitTrojan.Generic.D26B2E6D
AegisLabTrojan.Win32.Agent.lY1Q
ZoneAlarmTrojan.Win32.Agent.icgh
AhnLab-V3Trojan/Win32.Agent.R111396
Acronissuspicious
VBA32Trojan.FakeFolder.28409
MAXmalware (ai score=88)
MalwarebytesWorm.Mira
PandaW32/Milam.A.worm
TrendMicro-HouseCallWORM_MIRAS.SMN
RisingWorm.Mira!1.A270 (CLOUD)
IkarusTrojan.Win32.Heur
MaxSecureTrojan.Agent.icgh
FortinetW32/Mira.9C5!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Worm.Win32.Mira.A

How to remove Worm.Mira?

Worm.Mira removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment