Mikey.139659 removal

The Mikey.139659 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.139659 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• CAPE detected the Sakula malware family
• Attempts to modify proxy settings
• Deletes executed files from disk
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Mikey.139659?

File Info:
name: 351D527327E60E411178.mlw
path: /opt/CAPEv2/storage/binaries/9413f2e40ffec65e09a2be5e5777babbd386d09c5eaf9c3b57b2919186696f5f
crc32: 425CDDA6
md5: 351d527327e60e4111787eea7d67e73e
sha1: 97c91f2c8b30a766a152eb6e1d81320c517e9690
sha256: 9413f2e40ffec65e09a2be5e5777babbd386d09c5eaf9c3b57b2919186696f5f
sha512: 183cdbf23c3ee8363e94b32173c1d355d23e3338dcc310f43193df8395229d150934b765aa7cc15dd359d818eefd8b744db1196573b2bb0292c2c7f0b56aa93f
ssdeep: 6144:kdgv30si81H+Uyc4WLrxBcQtz8Q0bDC3zUonh8CD2Kc+hG:x71HTyc4WnxBF8Q02UonhsF+hG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T150A47D13F1808132E166293005A19B7496FF7EE46A38F36F6E5C767B2F732C2652531A
sha3_384: f4564379cc096b1e080fb9ba185287319add10360b59e3a2f26853e1ac5b2cabaad763f5952d653ea1176d239fd7ee7e
ep_bytes: e894470000e979feffff3b0d00de4200
timestamp: 2014-05-23 08:07:49

Version Info:
CompanyName: Juniper Networks , Inc
FileDescription: Juniper SSL VPN ActiveX Plugin.
FileVersion: 1, 3, 2, 1
InternalName: Juniper SSL VPN ActiveX.exe
LegalCopyright: Juniper Networks , Inc.  All rights reserved.
OriginalFilename: Juniper SSL VPN ActiveX.exe
ProductName: Juniper SSL VPN ActiveX
ProductVersion: 1, 3, 2, 1
Translation: 0x0409 0x04e4

Mikey.139659 also known as:

How to remove Mikey.139659?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.