Categories: Malware

Mikey.113188 information

The Mikey.113188 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.113188 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Drops a binary and executes it
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
redirector.gvt1.com
r4—sn-4g5e6nzz.gvt1.com

How to determine Mikey.113188?


File Info:

crc32: 1A1661C7md5: c8c61298b3996129b7fe08ef48c46ba3name: 4.exesha1: 786dd63ee198bf1488c9f4cc6fcd0ff60c96a2adsha256: 556c0d2ed2596f2301f87c446c2da49d0c07cd2bea4c233f032be660fec7a5f1sha512: 54e6177510b1c61e557205b123e47021bd48aa14466f661fd807233c62bbd547f023113fb6d149f69c99e9e092d80ede06f0bce2aee4c0bcb310589cb178fe1dssdeep: 49152:WN6dMmUmG0N9Jix8zsi7RNAkN0JKNrMKHndQweI6IUX27L65Sx+sdYJJTYA76Ls:WN6dXRn0+zsO0UrBndQPILUm7W5wmJNtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Mikey.113188 also known as:

Bkav W32.HfsAutoB.
DrWeb Trojan.MulDrop12.24571
MicroWorld-eScan Gen:Variant.Mikey.113188
FireEye Generic.mg.c8c61298b3996129
Qihoo-360 Win32/Trojan.Dropper.273
McAfee Artemis!C8C61298B399
Cylance Unsafe
BitDefender Gen:Variant.Mikey.113188
Cybereason malicious.8b3996
Invincea heuristic
BitDefenderTheta AI:Packer.EE22D05F1F
Cyren W32/Trojan.COGL-0728
Symantec ML.Attribute.HighConfidence
APEX Malicious
Paloalto generic.ml
GData Gen:Variant.Mikey.113188
Kaspersky HEUR:Trojan-Dropper.Win32.Scrop.vho
Alibaba Packed:Win32/Themida.9089c0ba
NANO-Antivirus Virus.Win32.Gen-Crypt.ccnc
AegisLab Trojan.Win32.Scrop.b!c
Tencent Win32.Trojan-dropper.Scrop.Tayo
Ad-Aware Gen:Variant.Mikey.113188
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.XPACK.Gen2
McAfee-GW-Edition BehavesLike.Win32.Generic.vc
Emsisoft Gen:Variant.Mikey.113188 (B)
Webroot W32.Trojan.Gen
Avira TR/Crypt.XPACK.Gen2
MAX malware (ai score=82)
Endgame malicious (high confidence)
ZoneAlarm HEUR:Trojan-Dropper.Win32.Scrop.vho
Microsoft Trojan:Win32/Occamy.AA
AhnLab-V3 Trojan/Win32.Clipbanker.R336117
Acronis suspicious
VBA32 BScope.Trojan.Wacatac
ALYac Gen:Variant.Mikey.113188
Malwarebytes Trojan.MalPack.Themida
Panda Trj/CI.A
ESET-NOD32 a variant of Win32/Packed.Themida.HLY
TrendMicro-HouseCall TROJ_GEN.R002H0CEJ20
Rising Dropper.Scrop!8.EABB (CLOUD)
SentinelOne DFI – Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet W32/Scrop.VHO!tr
AVG Win32:TrojanX-gen [Trj]
Avast Win32:TrojanX-gen [Trj]
CrowdStrike win/malicious_confidence_80% (W)

How to remove Mikey.113188?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Trojan-Downloader.Win32.Upatre.fxzr” infection

The Trojan-Downloader.Win32.Upatre.fxzr is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Script:SNH-gen [Drp]”?

The Script:SNH-gen [Drp] is considered dangerous by lots of security experts. When this infection is…

1 hour ago

Backdoor.MSIL.Bladabindi.cguk removal guide

The Backdoor.MSIL.Bladabindi.cguk is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Should I remove “W32/Autorun-BXQ”?

The W32/Autorun-BXQ is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Worm.Win32.AutoRun.gms”?

The Worm.Win32.AutoRun.gms is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

What is “Trojan:Win32/Zenpak.ASAF!MTB”?

The Trojan:Win32/Zenpak.ASAF!MTB is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago