How to remove “Win32/Spy.Mekotio.DV”?

The Win32/Spy.Mekotio.DV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Mekotio.DV virus can do?

• Executable code extraction
• Creates RWX memory
• Detects Sandboxie through the presence of a library
• Checks for the presence of known windows from debuggers and forensic tools
• Network activity detected but not expressed in API logs
• Checks the version of Bios, possibly for anti-virtualization
• Detects VirtualBox through the presence of a registry key
• Anomalous binary characteristics

How to determine Win32/Spy.Mekotio.DV?

File Info:
crc32: 0DFC4416
md5: 19c0023d4d2fd009b3cc77cf54deee0a
name: 19C0023D4D2FD009B3CC77CF54DEEE0A.mlw
sha1: d55be98f3386546bf8b2d5767d7f6fce87071e96
sha256: 290131c98b135a60ea4814830c3c745bc0cd0fad77a0af909db472c11fde33f4
sha512: 427042e5d5502e45ee5e440df56d548b319d617a31d916c789d771c7f83d43d06b8a3d53c0baa61b76967e1b8d253152f1c7cf28246b7c89caf27228f17b675c
ssdeep: 98304:P3EhxFlxTj2wNP7kEMWAae6C1S2XL0pOw4Kd/+dZ4ELxW2dc8m8EKLK+9nvOrsy3:PUfN17pZxolKXsnmQLOsdTT1WIqh
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
ProgramID: com.embarcadero.w5i4S2b3604qL
ProductVersion: 1.0.0.0
ProductName: w5i4S2b3604qL
FileVersion: 1.0.0.0
FileDescription: w5i4S2b3604qL
Translation: 0x0409 0x04e4

Win32/Spy.Mekotio.DV also known as:

How to remove Win32/Spy.Mekotio.DV?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.