Spy

Spyware.Mekotio information

Malware Removal

The Spyware.Mekotio is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.Mekotio virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Spyware.Mekotio?


File Info:

crc32: 802102C2
md5: c0d8d10b2098fa1da061f64ffe7af7ef
name: C0D8D10B2098FA1DA061F64FFE7AF7EF.mlw
sha1: 2cd7139053861ec569341bcceccb7d157ccfc272
sha256: 686e60d6079a08eaafcdca5ab248cbc18cae7c6871b989c3bcbcb9a02fd5fad9
sha512: b2be1593eea48a3c7b7eecf8673e7631fc7523b9de10fbf4fc49f2a487d16a6287c450d5238e7285eaf799c277194ce759f6ec7cf6eb94a41b6faf055fc27081
ssdeep: 196608:aofeavFw5jkb71yisOuuEUunWDZfcmbGv5d:amxJHYWNKv5
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:

ProgramID: com.embarcadero.QFAE0ULBROYIDJK
ProductName: QFAE0ULBROYIDJK
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription: QFAE0ULBROYIDJK
Translation: 0x0409 0x04e4

Spyware.Mekotio also known as:

DrWebTrojan.Mekotio.22
MicroWorld-eScanTrojan.GenericKD.44549789
FireEyeTrojan.GenericKD.44549789
ALYacSpyware.Banker.Mekotio
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Mekotio.4!c
BitDefenderTrojan.GenericKD.44549789
K7GWSpyware ( 005734fd1 )
K7AntiVirusSpyware ( 005734fd1 )
InvinceaMal/Generic-R + Troj/Agent-BGBA
CyrenW64/Trojan.VNHJ-1022
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Spy.Mekotio.L
TrendMicro-HouseCallTrojanSpy.Win64.MEKOTIO.A
AvastWin64:MalwareX-gen [Trj]
KasperskyBackdoor.Win32.Agent.mytxum
AlibabaBackdoor:Win32/Mekotio.d5402354
ViRobotTrojan.Win32.Z.Mekotio.11547648
Ad-AwareTrojan.GenericKD.44549789
SophosTroj/Agent-BGBA
Comodofls.noname@0
F-SecureTrojan.TR/Redcap.eewbw
TrendMicroTrojanSpy.Win64.MEKOTIO.A
McAfee-GW-EditionBehavesLike.Win64.Dropper.wh
EmsisoftTrojan.GenericKD.44549789 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Redcap.eewbw
KingsoftWin32.Troj.Generic.a.(kcloud)
GridinsoftTrojan.Win64.Agent.oa
ArcabitTrojan.Generic.D2A7C69D
ZoneAlarmBackdoor.Win32.Agent.mytxum
GDataTrojan.GenericKD.44549789
CynetMalicious (score: 100)
McAfeeArtemis!C0D8D10B2098
MAXmalware (ai score=84)
MalwarebytesSpyware.Mekotio
PandaTrj/CI.A
RisingSpyware.Mekotio!8.F5DF (TFE:5:XUpOH1G8NIE)
IkarusTrojan.Win64.Spy
FortinetW64/Mekotio.H!tr.spy
WebrootW32.Trojan.Gen
AVGWin64:MalwareX-gen [Trj]
Qihoo-360Win64/Trojan.4b0

How to remove Spyware.Mekotio?

Spyware.Mekotio removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment