Malware

About “Mikey.112171” infection

Malware Removal

The Mikey.112171 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.112171 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Mikey.112171?


File Info:

name: 570E1B4E1739CBFFF620.mlw
path: /opt/CAPEv2/storage/binaries/c86b3408497a2490d70b3958500ec73c0da0bc81a5587a6d43a3d3bccab546c7
crc32: 464D8614
md5: 570e1b4e1739cbfff62092be726c87ad
sha1: 000a45bc475cb9cd3aabae665d959489dedcfb34
sha256: c86b3408497a2490d70b3958500ec73c0da0bc81a5587a6d43a3d3bccab546c7
sha512: 5c953bb16616b09df80dc805dca224f57766fa5e431aa3a520d1b7c10eaf32b812d1a7c9c7dbd359e4e6cf7a6d35bd43f721be9219c326a91c780c7199226ac7
ssdeep: 3072:jO82VtxJg9nwsvYsQsK6UpDHs3YCGXbGM+oLMjg79tno4v5eTCJqvV6dL1Mt4o+i:yJVtbAnQ9JHaLGigLj7Xv5eTlIdLu4of
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1040412226425802ADE912BFDCDF94B4E7D028F75BB1B0C1B1048DDE1AF116787B691B7
sha3_384: 2bef1dc5fbedbc38ae7364c93469eedb982de554d6776b8ecce63983a2e3918b44aa3f8e51b1c434877d0b8057faccb9
ep_bytes: 81c148290000558bec83ec0cc745f8ef
timestamp: 2011-03-25 05:01:22

Version Info:

0: [No Data]

Mikey.112171 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Mikey.112171
FireEyeGeneric.mg.570e1b4e1739cbff
ALYacGen:Variant.Mikey.112171
CylanceUnsafe
VIPRELooksLike.Win32.Sirefef.i (v)
K7AntiVirusTrojan ( 0055dd191 )
K7GWTrojan ( 0055dd191 )
Cybereasonmalicious.e1739c
CyrenW32/Falab.F.gen!Eldorado
SymantecTrojan.Zbot!gen35
ESET-NOD32a variant of Win32/Kryptik.AILL
APEXMalicious
KasperskyHEUR:Trojan-Ransom.Win32.PornoAsset.vho
BitDefenderGen:Variant.Mikey.112171
NANO-AntivirusTrojan.Win32.Gimemo.vylkg
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
AvastWin32:Zbot-OXD [Trj]
Ad-AwareGen:Variant.Mikey.112171
TACHYONTrojan/W32.Gimemo.180224
SophosML/PE-A + Mal/Katusha-J
ComodoTrojWare.Win32.Kryptik.AIDO@4put51
DrWebTrojan.PWS.Panda.1981
ZillyaTrojan.Gimemo.Win32.3054
TrendMicroTSPY_ZBOT.SM3T
McAfee-GW-EditionBehavesLike.Win32.VirRansom.ch
EmsisoftGen:Variant.Mikey.112171 (B)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Mikey.112171
JiangminTrojan/Gimemo.cxe
WebrootW32.Infostealer.Zeus
AviraTR/Yakes.AE
Antiy-AVLTrojan[Ransom]/Win32.Gimemo
ArcabitTrojan.Mikey.D1B62B
ViRobotTrojan.Win32.A.Gimemo.180224
MicrosoftVirTool:Win32/Obfuscator.XI
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Yakes.R30116
Acronissuspicious
McAfeePWS-Zbot.gen.azq
MAXmalware (ai score=81)
VBA32Hoax.Gimemo
TrendMicro-HouseCallTSPY_ZBOT.SM3T
RisingTrojan.Generic@ML.97 (RDML:yyGOokjrfu3+yQolVUPoAg)
YandexTrojan.GenAsa!q5JQPGrpPKI
IkarusTrojan-Spy.Win32.Zbot
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Poxter.A!tr
BitDefenderThetaAI:Packer.A6C6D2CE21
AVGWin32:Zbot-OXD [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Mikey.112171?

Mikey.112171 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment