Worm

Should I remove “Worm:Win32/Mira.A”?

Malware Removal

The Worm:Win32/Mira.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Mira.A virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Attempts to execute a powershell command with suspicious parameter/s
  • Creates a hidden or system file
  • Anomalous binary characteristics

How to determine Worm:Win32/Mira.A?


File Info:

crc32: D45279D9
md5: 6f8bff1a961b72e687d100eacc2c19f7
name: 6F8BFF1A961B72E687D100EACC2C19F7.mlw
sha1: e0f9d9024681f024a51f7de93f9fe98085064e31
sha256: 88832b61d1b03816bf7b79b31f48b7afe8fdc255529d1f4eee619dcdec88e62b
sha512: ac6e9d610244ec7d2d30f402bc517e89d0e1a3c9624ee1e29f624ed82156636f6970d24b9881026530176ab621ca0600ee8b35a58e930192513e184b852ce0d3
ssdeep: 6144:f8dNXSEehucqJLNswQv/YkG57aK2RLWCxCtR7bpHHEQHvBZsUDE7aQ0QBjfH2wun:8/ZJLuMkG579GLWCMtJ+QHvv7CeULa0O
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Mira.A also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004fdf181 )
CynetMalicious (score: 100)
ALYacDropped:Trojan.GenericKDZ.69837
CylanceUnsafe
SangforTrojan.Generic-Script.Save.7b7a01dd
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaRansom:Win32/Blocker.32d45152
K7GWTrojan ( 004fdf181 )
Cybereasonmalicious.a961b7
CyrenPSH/Dropper.A
SymantecML.Attribute.HighConfidence
ESET-NOD32PowerShell/TrojanDropper.Agent.D
APEXMalicious
AvastNSIS:Downloader-ACW [Trj]
KasperskyTrojan-Ransom.Win32.Blocker.ifpx
BitDefenderDropped:Trojan.GenericKDZ.69837
MicroWorld-eScanDropped:Trojan.GenericKDZ.69837
TencentWin32.Trojan.Blocker.Wskp
Ad-AwareDropped:Trojan.GenericKDZ.69837
SophosMal/Generic-S
ComodoTrojWare.Script.TrojanDropper.Agent.D@7l67fr
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.hh
FireEyeGeneric.mg.6f8bff1a961b72e6
EmsisoftDropped:Trojan.GenericKDZ.69837 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1116910
KingsoftWin32.Troj.GenericKD.v.(kcloud)
MicrosoftWorm:Win32/Mira.A
ArcabitTrojan.Generic.D110CD
AegisLabTrojan.Win32.Blocker.j!c
GDataPowerShell.Trojan-Dropper.Agent.AIT
AhnLab-V3Trojan/Win32.Agent.R348735
McAfeeArtemis!6F8BFF1A961B
MAXmalware (ai score=100)
VBA32Hoax.Blocker
MalwarebytesAllaple.Worm.DDoS.DDS
PandaTrj/CI.A
RisingWorm.Allaple/VBS!1.BD75 (CLASSIC)
FortinetVBS/PowerShell.D!tr
AVGNSIS:Downloader-ACW [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HoMASOgA

How to remove Worm:Win32/Mira.A?

Worm:Win32/Mira.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment