Mikey.95870 removal

The Mikey.95870 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mikey.95870 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Anomalous file deletion behavior detected (10+)
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Enumerates running processes
The binary contains an unknown PE section name indicative of packing
Looks up the external IP address
Authenticode signature is invalid
Steals private information from local Internet browsers
Collects information about installed applications
Attempts to identify installed AV products by installation directory
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to modify proxy settings
Attempts to access Bitcoin/ALTCoin wallets
Harvests cookies for information gathering
Anomalous binary characteristics

Related domains:

wpad.local-net

ip-api.com

opip4.info

How to determine Mikey.95870?


File Info:
name: C2360E0DA886AAD70289.mlw
path: /opt/CAPEv2/storage/binaries/4f854acec7e0cb099cb14c4af382a370de8e0abc85511425101887faea883ee6
crc32: 2CF1DCB2
md5: c2360e0da886aad702893cae349c5521
sha1: d540fdc6821bdf1b884eb1cfc456efdf89858431
sha256: 4f854acec7e0cb099cb14c4af382a370de8e0abc85511425101887faea883ee6
sha512: 461f567454351b6da9788c63b53eb266a27151ebb5a63caf3c5ac748273ba429ea55212e1c7e0f8d28c94cc25b9b0a9c19b6bcb7805a3e63ddfb76f963f60a6a
ssdeep: 24576:31immtFp1IsaZS4bVKR/5K2wYlYjYU7cmTbe2tczK/zK:3Yzp1IJY4YhEBm2tcG
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T10335BF5A7BA801F5D0B7C534CAA66607EBB2B8571630C71F02E5875E3F23A715E2E312
sha3_384: de7babafb865356cb94b9908c9e4e51e51892efb4934f488fc6e39b6304c54f3ad732d691fdcebd3e50608c33550d573
ep_bytes: 4883ec28e8bb0500004883c428e982fe
timestamp: 2019-06-26 20:10:21

Version Info:
0: [No Data]

Mikey.95870 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	Generic.mg.c2360e0da886aad7
McAfee	GenericRXAA-AA!C2360E0DA886
Cylance	Unsafe
Zillya	Trojan.Agent.Win64.3271
K7AntiVirus	Spyware ( 0054cd641 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Spy.Agent.BE
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Wacatac-7134140-1
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Mikey.95870
MicroWorld-eScan	Gen:Variant.Mikey.95870
Avast	Win64:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10ba2304
Ad-Aware	Gen:Variant.Mikey.95870
Emsisoft	Gen:Variant.Mikey.95870 (B)
DrWeb	Trojan.PWS.Stealer.26452
TrendMicro	TROJ_GEN.R002C0DKN21
McAfee-GW-Edition	BehavesLike.Win64.Generic.th
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Azorult
GData	Gen:Variant.Mikey.95870
Jiangmin	Trojan.PSW.Coins.dbe
Avira	HEUR/AGEN.1103392
Antiy-AVL	Trojan/Generic.ASMalwS.2B7296C
Microsoft	Trojan:Win32/Cryptbot.YL!MSR
AhnLab-V3	Trojan/Win32.RL_Agent.R277284
ALYac	Gen:Variant.Mikey.95870
MAX	malware (ai score=83)
VBA32	TrojanPSW.Stealer
Malwarebytes	Spyware.CryptBot
TrendMicro-HouseCall	TROJ_GEN.R002C0DKN21
Rising	Stealer.Cryptbot!1.BA1D (CLASSIC)
Yandex	Trojan.GenAsa!LBf2Lo0KaBU
SentinelOne	Static AI – Malicious PE
Fortinet	W64/Agent.BE!tr
AVG	Win64:PWSX-gen [Trj]
Panda	Trj/CI.A

How to remove Mikey.95870?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.