wrong activation code

I wear glasses and i still cannot read what is at the bottom of the program interface .!!

2 hits at VirusTotal … vendor does not know or does not care.

SHA256: 0ea2be59b2daea1b112ec478340e45da3da0b338256c0d3d6729fb3aeffa964e
File name: music_morpher.exe
Detection ratio: 2 / 68
Analysis date: 2019-05-20 09:56:55 UTC ( 1 week, 1 day ago )
Antivirus Result Update
Cyren W32/Trojan.BJL.gen!Eldorado 20190520
F-Prot W32/Trojan.BJL.gen!Eldorado 20190520

Equivalent to Microsoft’s name for it: Trojan:Win32/Estiwir.A

This trojan downloads other malware onto your computer and can stop some programs or applications from working correctly.

It is downloaded onto your computer by other malware, including PWS:Win32/OnLineGames.AH and PWS:Win32/Lolyda.BF.

This threat may download other malware that can steal your information by recording usernames and passwords. After you remove this threat it is a good idea to change your passwords.

It is installed in the <system folder> as Midimap.dll, replacing the legitimate Midimap.dll file.

When run, Trojan:Win32/Estiwir.A is injected to Explorer.exe. It then downloads and runs other malware, including PWS:Win32/OnLineGames.AH.

The downloaded malware files are saved and run in the %TEMP% folder with the filename <10 numbers>.exe, for example: 7223939032.exe.

In the wild, additional malware downloaded from the following URLS:

blue.iaevkw.com/<removed>/sheet3.rar
blue.ixcylp.com/<removed>/sheet3.rar
now.eyrzaz.com/<removed>/witer3.rar
now.toilez.com/<removed>/witer3.rar
pler.znfzvd.com/<removed>/witer3.rar
pler.zrjqgg.com/<removed>/witer3.rar
zip.hvtmcb.com/<removed>/witer3.rar
zip.kairwu.com/<removed>/witer3.rar
zip.ndksgu.com/<removed>/witer3.rar
zip.nnmyuk.com/<removed>/witer3.rar
zip.ogagud.com/<removed>/witer3.rar
zip.ojpbvw.com/<removed>/witer3.rar
zip.qsmoeu.com/<removed>/witer3.rar
zip.rwzuok.com/<removed>/witer3.rar
The downloaded malware is detected as PWS:Win32/OnLineGames.AH.
Stops service and deletes files

Trojan:Win32/Estiwir.A stop the following services:

EstRtwIFDrv
v3engine

The trojan deletes the <system folder>\drivers\EstRtw.sys. This file is related to the EstRtwIFDrv service.

These services are related to AhnLab security software and an ESTsoft Corp application. It likely stops these services to prevent detection.

The presence of this malware may stop AhnLab security software or ESTsoft Corp applications from working correctly.

Analysis by Ric Robielos

.

Everytime i start the program it says it stopped responding and it crashes…anyone else has this problem? i tried reinstalling but still the same problem, i need help.

Wrong activation code.

This is version 5.0.59 of the software. The first time I encountered this program being given away, it was on a different giveaway site back in 2016-04-13, and the comments indicated that the same version had been offered there before. That version was also 5.0.59, however, it was the GOLD edition. This is the standard edition.

The GOLD edition retail price has been and still is $99.95. This standard edition is $29.95.

Since that time, the Standard Edition of the software has been offered on SoS on at least two other occasions (2016-05-16 and 2016-12-18).

This version supports Window 7 and above. Back in 2016, it supported XP and above, so since it is the same exact version number, it should still install on an XP system if anyone wanted to try.

Many of the comments back in 2016 were that the software crashed often, and there was no indication that one version of the operating system had more than any other. Each of the offering since then has been the same, so I expect there could be some crashes still.

Also, many users had trouble understanding how to use the GOLD Edition’s program’s interface. It is too bad because the GOLD edition of the program appearance looks pretty nice. The Standard Edition does have a different appearance.

This edition installs the MS Visual C++ 2008 runtime, even though you may have a later version.

I have installed both the Standard and Gold editions in the past and found that the program did not offer anything that I need, so I will pass on this one, but wanted to provide my past experience should it be of any value to anyone.

[@Sonic39670] Same thing happened to me. I ended up doing a systems restore as it leaves a big footprint on the system, and after reading Peter Blaise comments above I’m glad I did.