Mikey.131936 removal guide

The Mikey.131936 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mikey.131936 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Mikey.131936?


File Info:
name: 561970D8D0F7A9378C54.mlw
path: /opt/CAPEv2/storage/binaries/8d966f8e4680c18a021c763099d88e43b60b2e5aad0ce6186c4f91beb9d030c0
crc32: FD1119BD
md5: 561970d8d0f7a9378c549701c5d8e204
sha1: 379e8098126d1f37afce4c3a67fbc36d260947f5
sha256: 8d966f8e4680c18a021c763099d88e43b60b2e5aad0ce6186c4f91beb9d030c0
sha512: c05cb042b0f223cf9c6f99ee5edbfa13835cf781d28142b73e3b796b5a05a067377895c3b4a0f2c740ac9ef66bcb1f6e7eb7ac88bd1749eb66975ed8b300961a
ssdeep: 98304:Ko0u5x6M1WoSu5x6M1Wo0u5x6M1WocFhHZh/o6FhHZhVYPklJL:K8iqi8i1h/PhVYPkLL
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T175769E07B69500F9E16A9530966A5636EB72BC560B21DBCF4390F61D2E337C0AF36327
sha3_384: 1c58b1fcab38dadc8423c354b3dd3709929eb255ffddd419124a6f8fbbbd74d32f0565ba0c3fffae3da4312e6ad0785e
ep_bytes: 4883ec28e80f0600004883c428e96afe
timestamp: 2020-04-22 03:52:24

Version Info:
CompanyName: Microsoft Corporation
FileDescription: .NET Core Host
FileVersion: 3,100,420,22103 @Commit: 0c2e69caa609d5164e16df91d6d646eb9ed74640
InternalName: .NET Core Host
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: .NET Core Host
ProductName: Microsoft® .NET Framework
ProductVersion: 3,100,420,22103 @Commit: 0c2e69caa609d5164e16df91d6d646eb9ed74640
Translation: 0x0409 0x04e4

Mikey.131936 also known as:

DrWeb	Trojan.Siggen3.61405
MicroWorld-eScan	Gen:Variant.Mikey.131936
FireEye	Gen:Variant.Mikey.131936
McAfee	Artemis!561970D8D0F7
Cylance	Unsafe
Cyren	W64/Rbot.T.gen!Eldorado
ClamAV	Win.Malware.Gotango-7000352-0
BitDefender	Gen:Variant.Mikey.131936
Ad-Aware	Gen:Variant.Mikey.131936
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.Ransom.wh
Emsisoft	Gen:Variant.Mikey.131936 (B)
Ikarus	Trojan.Agent
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Mikey.131936
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Mikey.131936
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Mikey.131936?

Mikey.131936 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X