Malware

How to remove “Mikey.113302 (B)”?

Malware Removal

The Mikey.113302 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.113302 (B) virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.baidu.com

How to determine Mikey.113302 (B)?


File Info:

crc32: EB6F35E6
md5: 762547f07578d0c2f8b9696d49b644ee
name: 762547F07578D0C2F8B9696D49B644EE.mlw
sha1: dc9daf089e04214eb6029c7c725a81591fad533f
sha256: b80787c048616026cb29859c7d8928d2f5a1c527a631324bac309b94bc92f499
sha512: f64d8a8761aeff82ee6fcb5930691edfbacb2f26dcc84fe69bd118a4e014e55889d16d984558849fb5ce1b1047ff8118d015e392f9bbc34715df06f2bfd729e1
ssdeep: 24576:ker7AvQPBEQLRX3MBCFZhZLwnuSbar9csl:kPYrGKhZLwuS+r
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: Azur lane
ProductName: Azur lane
ProductVersion: 1.0.0.0
FileDescription: Azur lane
Translation: 0x0804 0x04b0

Mikey.113302 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0040f54a1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Mikey.113302
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Pidgeon.49462ffc
K7GWAdware ( 004b87ea1 )
Cybereasonmalicious.07578d
CyrenW32/A-8128ee96!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
AvastWin32:Pasta [Cryp]
ClamAVWin.Malware.Generic-9820446-0
BitDefenderGen:Variant.Mikey.113302
NANO-AntivirusVirus.Win32.Agent.dvixmz
MicroWorld-eScanGen:Variant.Mikey.113302
Ad-AwareGen:Variant.Mikey.113302
SophosW32/Pidgeon-A
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderThetaGen:NN.ZexaF.34722.qv0@aWNlTfhb
TrendMicroTROJ_GEN.R005C0PET21
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.762547f07578d0c2
EmsisoftGen:Variant.Mikey.113302 (B)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftMalware.Win32.Gen.bot!se24507
ArcabitTrojan.Mikey.D1BA96
GDataGen:Variant.Mikey.113302
Acronissuspicious
McAfeeFlyagent.d
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack.FlyStudio
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R005C0PET21
RisingPacker.Win32.Agent.g (CLASSIC)
IkarusTrojan.Tonmye
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.BELF!tr
AVGWin32:Pasta [Cryp]
Paloaltogeneric.ml

How to remove Mikey.113302 (B)?

Mikey.113302 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment