Categories: Malware

What is “Mikey.71091”?

The Mikey.71091 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.71091 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

ecosystem.unvocal.ru

duckandbear.top

www.bing.com

How to determine Mikey.71091?


File Info:
crc32: E945D63Cmd5: d1fd47574603e5c95a673a6f5bbcf0fcname: D1FD47574603E5C95A673A6F5BBCF0FC.mlwsha1: 5c40c43dc3141a2cbde4a0810483f48818e354a6sha256: 15b36c64c85d76aed9449413717b3e13e622b789b873446c842df7c77951e2a4sha512: 1f6bc7a0c68dddeed92d4cfc4535d4c874fc7cb1b3aecab69946b3adc706f49baf1e6cbf50f62e172ca3ef329035714e4b04578315181ca6d20f1e49a56bc9fbssdeep: 6144:Ke+dLLOvKZvz+Pwr/wrqG4G4G4G4G4G4G4G4G4GI12GI12GI12GI12GI12GI12GF:3+9Lr1iPwr/wrRO+type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: DrifftInternalName: DrifftFileVersion: 11.4.30.21CompanyName: DrifftProductName: DrifftProductVersion: 40.3.76.3FileDescription: DrifftOriginalFilename: DrifftTranslation: 0x1c09 0x04b0

Mikey.71091 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mikey.71091
FireEye	Generic.mg.d1fd47574603e5c9
CAT-QuickHeal	Adware.Dataric.A5
Qihoo-360	Win32/Virus.Adware.e97
ALYac	Gen:Variant.Mikey.71091
Malwarebytes	InstallMonster.Adware.Bundler.DDS
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan-Downloader ( 00516a931 )
BitDefender	Gen:Variant.Mikey.71091
K7GW	Trojan-Downloader ( 00516a931 )
Cybereason	malicious.74603e
Cyren	W32/S-e8a08b0c!Eldorado
Symantec	PUA.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
NANO-Antivirus	Trojan.Win32.InstallMonster.esquam
AegisLab	Adware.Win32.Generic.2!c
Tencent	Malware.Win32.Gencirc.10b4590e
Ad-Aware	Gen:Variant.Mikey.71091
Emsisoft	Gen:Variant.Mikey.71091 (B)
Comodo	TrojWare.Win32.TrojanDownloader.Tovkater.HT@7ebfmm
F-Secure	Adware.ADWARE/HPDefender.Gen7
DrWeb	Trojan.InstallMonster.2349
Zillya	Downloader.Tovkater.Win32.396
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Sophos	Mal/Generic-S (PUA)
SentinelOne	Static AI – Malicious PE – Downloader
GData	Gen:Variant.Mikey.71091
Jiangmin	TrojanDownloader.Generic.awzg
Avira	ADWARE/HPDefender.Gen7
Antiy-AVL	Trojan/Win32.TSGeneric
Arcabit	Trojan.Mikey.D115B3
SUPERAntiSpyware	Adware.InstallMonster/Variant
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	PUP/Win32.HPDefender.R208879
McAfee	GenericRXCP-LC!D1FD47574603
MAX	malware (ai score=88)
VBA32	AdWare.TOVus
Cylance	Unsafe
Panda	Trj/CI.A
ESET-NOD32	Win32/TrojanDownloader.Tovkater.DB
Rising	Downloader.Tovkater!8.E5CE (TFE:5:ht3ItNXt4dS)
Yandex	Trojan.GenAsa!DmdEMU0JQRk
Ikarus	Trojan-Downloader.Win32.Tovkater
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Tovkater.CQ!tr
BitDefenderTheta	Gen:NN.ZexaF.34804.4z2@aehGx7wI
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)