Malware

Mikey.125375 removal tips

Malware Removal

The Mikey.125375 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.125375 virus can do?

  • At least one process apparently crashed during execution
  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Serbian
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Mikey.125375?


File Info:

crc32: C89EA569
md5: b6ae73b0496ba13e94ef65b57511d8f3
name: B6AE73B0496BA13E94EF65B57511D8F3.mlw
sha1: b58cd6040d009c5ac6773130e457365a1aadc9e0
sha256: 415f9d7bdc9ea00d2c8e58d906cdd7af876e28494e24e027401b6be60144ddcc
sha512: 04b02bbab15422d8343800b48de2ccd236c8aa57c87928bb2a8468a7c79d6c5fe837e20285d52021f48ba938d4bfe461cef5fff20f6db2ab0502814ff07c75f2
ssdeep: 98304:JQNhZq6SrLuxXczgLmYTtvARn1iW84/rIXu7XZ8zGTNZ8yaKb:JOq6kKxszg6Xd13/1VgGTn8rk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: Variant of duck
FileVersion: 6.36.543
Copyright: Copyrighz (C) 2020, wodkagudy
ProductVersion: 1.14.44
TranslationUsa: 0x0273 0x011d

Mikey.125375 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Mikey.125375
FireEyeGeneric.mg.b6ae73b0496ba13e
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.ZPACK.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Azorult.BL!MTB
GridinsoftTrojan.Gen.dd!c
GDataGen:Variant.Mikey.125375
Acronissuspicious
VBA32Malware-Cryptor.InstallCore.6
MalwarebytesTrojan.MalPack.GS
RisingTrojan.Generic@ML.89 (RDML:P1YzfxTGUS3M+OJx0RLcMA)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.ERHN!tr
AVGFileRepMalware

How to remove Mikey.125375?

Mikey.125375 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment