Categories: Malware

Mikey.105648 removal

The Mikey.105648 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.105648 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Possible date expiration check, exits too soon after checking local time
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization
Steals private information from local Internet browsers
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

xfhtmlreport.nanjingchenxi.com

How to determine Mikey.105648?


File Info:
crc32: 32CC6285md5: 69026fbbd94eed283f212d3dd64a51ddname: xfhtmlreport-4.exesha1: 48cdbc4f0d9794a404ef81b6fa36d3745cf4a934sha256: c090a0e86d1a07afc362e2b16463c55534231863a44fe5822f8c61408d84f153sha512: 808dfa7d410e2f839888f982a238009402945503af1e8c64a7da6521ffa52a24ea2944cb28e26e38034a485c61173cc9007ad1a08111e5f4645d0530fb07f99cssdeep: 24576:iFVz1wy65V0L1LQQjO00trKUTQZIY9e3isU+NBmuU3vbx+geMPY3vf9kT+FhDVo:iwye/PD2M8+TmNFleMuqT+FhDVoH/Ytype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2019InternalName: xfhtmlreportFileVersion: 1.0.2.3ProductName: xfhtmlreportProductVersion: 1.0.2.3FileDescription: xfhtmlreportTranslation: 0x0804 0x04b0

Mikey.105648 also known as:

MicroWorld-eScan	Gen:Variant.Mikey.105648
FireEye	Generic.mg.69026fbbd94eed28
CAT-QuickHeal	PUA.CoinminerRI.S9232579
McAfee	GenericRXJD-EH!69026FBBD94E
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Adware ( 005096951 )
BitDefender	Gen:Variant.Mikey.105648
K7GW	Adware ( 005096951 )
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KuaiZip.V potentially unwanted
APEX	Malicious
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuziTui.gen
Alibaba	Backdoor:Win32/KZip.11918998
NANO-Antivirus	Riskware.Win32.Kuaizip.giyhfs
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Mikey.105648 (B)
F-Secure	Heuristic.HEUR/AGEN.1108443
DrWeb	Program.Kuaizip.4
TrendMicro	TROJ_GEN.R002C0PCM20
McAfee-GW-Edition	GenericRXJD-EH!69026FBBD94E
Sophos	Generic PUA EI (PUA)
GData	Gen:Variant.Mikey.105648
MaxSecure	Trojan.Malware.74701866.susgen
Avira	HEUR/AGEN.1108443
Microsoft	PUA:Win32/CoinMiner
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.KuziTui.gen
AhnLab-V3	PUP/Win32.RL_KuaiZip.R302178
ALYac	Gen:Variant.Mikey.105648
MAX	malware (ai score=84)
VBA32	BScope.Adware.Burden
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PCM20
Rising	Adware.Agent!1.C6CF (RDMK:cmRtazoQp0xK1Bn4QMhQAibGNnGD)
Fortinet	W32/Ursu.75686!tr
Ad-Aware	Gen:Variant.Mikey.105648
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen