Malware

How to remove “Mikey.126924 (B)”?

Malware Removal

The Mikey.126924 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mikey.126924 (B) virus can do?

  • Attempts to connect to a dead IP:Port (4 unique times)
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz
a.tomx.xyz
2398.35go.net
infoc0.duba.net
config.i.duba.net

How to determine Mikey.126924 (B)?


File Info:

crc32: 89292C2D
md5: 18b591907532b9fa20aeb1050d448660
name: 18B591907532B9FA20AEB1050D448660.mlw
sha1: e013bec1aef6d31abf095170265920d6b2ea0146
sha256: 5ad6581b56a0f6b400d99afed1ada178c0b3cc8c2a4aaf29f25e354351702d96
sha512: 8272df4e77e26b51bff858bf6d25c584fb2445b81bbade4b16b0d66e71ade509e9e942981bd3eb0212816e92f9173d0f6b78f0f9067b4bc01959fa0693219bcd
ssdeep: 24576:EOy7dQeczW3SqD4ttOLjlifcu4xQWBsQ3aIkbFq/C78f76+CyMAO0eQiUMB80eQx:EZ7Seci3SqDwtAJyWDkRqqmm+xMbyiUo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 1998-2021 Kingsoft Corporation
InternalName: KInstallTool
FileVersion: 2021,08,25,954
CompanyName: Kingsoft Corporation
ProductName: Kingsoft Internet Security
ProductVersion: 9,3,0,954
FileDescription: Kingsoft Security - x5b89x88c5x7a0bx5e8f
OriginalFilename:
Translation: 0x0000 0x04b0

Mikey.126924 (B) also known as:

K7AntiVirusUnwanted-Program ( 00587ece1 )
Elasticmalicious (high confidence)
ALYacGen:Variant.Mikey.126924
CylanceUnsafe
BitDefenderGen:Variant.Mikey.126924
K7GWUnwanted-Program ( 00587ece1 )
CyrenW32/KingSoft.C.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/KingSoft.L potentially unwanted
APEXMalicious
CynetMalicious (score: 100)
MicroWorld-eScanGen:Variant.Mikey.126924
Ad-AwareGen:Variant.Mikey.126924
SophosGeneric PUA OA (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Worm.tc
FireEyeGen:Variant.Mikey.126924
EmsisoftGen:Variant.Mikey.126924 (B)
JiangminBackdoor.Generic.btxp
MicrosoftProgram:Win32/Uwamson.A!ml
GDataGen:Variant.Mikey.126924
AhnLab-V3Malware/Win.Generic.C4611220
McAfeeGenericRXAA-AA!18B591907532
MAXmalware (ai score=83)
VBA32BScope.Trojan.Bugor
TrendMicro-HouseCallTROJ_GEN.R002H0CHQ21
YandexRiskware.Agent!QMINmAfuCAk
FortinetW32/Fragtor.8085!tr
Paloaltogeneric.ml

How to remove Mikey.126924 (B)?

Mikey.126924 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment