Malware

What is “Mikey.112989”?

Malware Removal

The Mikey.112989 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.112989 virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Japanese
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Mikey.112989?


File Info:

crc32: 6A707800
md5: 362840c2dc18581a863236d2a41e1fac
name: 362840C2DC18581A863236D2A41E1FAC.mlw
sha1: a1451457373a75b125696b1117fece3bac5d5e3a
sha256: 5651e82fb9c172d956ce01ca2589ee23658106ae6a9b72965101f7a42d2544c2
sha512: 596052c6954c6d4dbef9a26d3bba66f1f8d692b1f7f32e957035647d3c210e84e9a63959489e704be442dc4ac29acc4e43b1e0678634873730501635051006d4
ssdeep: 3072:SlpM1WeT1kbqEHqotnDJkp8L8KyGZWbY7kAIlBmnmDx4aH1ujU:IM1W41MXKoxDuCyMwVxlBkjaH1uY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Mikey.112989 also known as:

K7AntiVirusTrojan ( 00571bda1 )
LionicTrojan.Win32.Zenpak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.32922
CynetMalicious (score: 99)
ALYacTrojan.Ransom.Ryuk
CylanceUnsafe
ZillyaTrojan.GenCBL.Win32.240
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Kryptik.8caf353d
K7GWTrojan ( 00571bda1 )
Cybereasonmalicious.2dc185
CyrenW32/Ransom.QXVV-0555
SymantecTrojan.Emotet
ESET-NOD32a variant of Win32/Kryptik.HHJZ
AvastWin32:DangerousSig [Trj]
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderGen:Variant.Mikey.112989
MicroWorld-eScanGen:Variant.Mikey.112989
TencentWin32.Trojan.Falsesign.Lhwy
Ad-AwareGen:Variant.Mikey.112989
SophosMal/BadCert-Gen
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.RYUK.WLDE
McAfee-GW-EditionRansom-Ryuk!362840C2DC18
FireEyeGen:Variant.Mikey.112989
EmsisoftMalCert-S.DA (A)
JiangminTrojan.Zenpak.eiv
WebrootW32.Gen.BT
AviraTR/Ransom.Ryuk.xeimd
Antiy-AVLTrojan/Generic.ASMalwS.310C00D
MicrosoftRansom:Win32/Ryuk!MSR
ArcabitTrojan.Mikey.D1B95D
GDataGen:Variant.Mikey.112989
TACHYONRansom/W32.Ryuk.312784
AhnLab-V3Malware/Win32.RL_Trojanspy.R364099
McAfeeRansom-Ryuk!362840C2DC18
MAXmalware (ai score=100)
VBA32BScope.Trojan.Jobutyve
MalwarebytesRansom.Ryuk
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win32.RYUK.WLDE
IkarusTrojan.Win32.Generic
MaxSecureTrojan.Malware.73832973.susgen
FortinetW32/Kryptik.HEOE!tr
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Ryuk.HgIASRMA

How to remove Mikey.112989?

Mikey.112989 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment