Should I remove “Win64/Spy.Mekotio.H”?

The Win64/Spy.Mekotio.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Spy.Mekotio.H virus can do?

• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine Win64/Spy.Mekotio.H?

File Info:
crc32: 1986148E
md5: 3cdeb738f9dd7a7f83452db6ffc5e765
name: K77ART2M5JOJEHO9XZ4QXDDAN862
sha1: 4efd331759831a7d7095a61baa52d9ae2ecc7424
sha256: 6002914fbe3a43c4f416cac2908bd6b6128aa93c3e71c06102fd6675a904d158
sha512: 858894d1f1eb7aec2b71a71a953296e39aa45288cba099fa08d07bff8a35774f9d204f4caaf18d217af944b8a7306e6290533a0eda51fb4b616fc8ae0e1a4e5e
ssdeep: 196608:VMZQUuDX7DFRSb0FG+CVqJbYqkmDDTfCtm:VMZQUu3DuGG37qvDSm
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
ProgramID: com.embarcadero.RDYKAQHEO3ADO7Q
ProductName: RDYKAQHEO3ADO7Q
FileVersion: 1.4.7.0
ProductVersion: 1.0.0.0
FileDescription: RDYKAQHEO3ADO7Q
Translation: 0x1409 0x04e4

Win64/Spy.Mekotio.H also known as:

How to remove Win64/Spy.Mekotio.H?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.