Application.ClassroomSpy.A removal guide

The Application.ClassroomSpy.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.ClassroomSpy.A virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid

How to determine Application.ClassroomSpy.A?


File Info:
name: 2F74BD83015B04E4C752.mlw
path: /opt/CAPEv2/storage/binaries/bfb34889517acfe00f03af89ccde4ae4654eaf53dd9d4e278a236f04e3940e4f
crc32: 169B23AD
md5: 2f74bd83015b04e4c7524319d58bb18d
sha1: 9256310c794ffe67f7f06fa55ccf09fd778b553a
sha256: bfb34889517acfe00f03af89ccde4ae4654eaf53dd9d4e278a236f04e3940e4f
sha512: 09f1d1adeb14e8afbf1129b87cd47b5a82dc412a81ba5159a5d080d1f01824a64559ef93f7b7b78f4c1afc67bf0be5d465d23d751770fd41246aa4d0b5a983af
ssdeep: 49152:j8E32olLTIvxIjFYe+HBPO/Aagxy8wDGcuhIIwqBfjbZGRZV6n+E:Z32olLTI5IjPWQ8wDG3dwqJ8E
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T123066E2EFD0244F4DE1346B382CFF6BB57285B348411DDEBEA9AFD09A5731231906626
sha3_384: 07bb825955f14e35cae21550e9f6d07fece6271b8e12ce739a3a273eb354121e528ab848a81fdffb27a892b8d5219e4b
ep_bytes: 83ec0cc705b8e9770001000000e87e01
timestamp: 2022-01-10 10:32:13

Version Info:
0: [No Data]

Application.ClassroomSpy.A also known as:

Bkav	W32.Common.08045C35
MicroWorld-eScan	Application.ClassroomSpy.A
FireEye	Application.ClassroomSpy.A
Cylance	unsafe
Zillya	Trojan.Monitor.Win32.401
K7AntiVirus	Unwanted-Program ( 0057487b1 )
K7GW	Unwanted-Program ( 0057487b1 )
ESET-NOD32	a variant of Win32/Monitor.ClassroomSpy.A potentially unsafe
BitDefender	Application.ClassroomSpy.A
Emsisoft	Application.ClassroomSpy.A (B)
VIPRE	Application.ClassroomSpy.A
Sophos	Generic Reputation PUA (PUA)
GData	Application.ClassroomSpy.A
Webroot	Pua.Monitor.Classroomspy
Arcabit	Application.ClassroomSpy.A
VBA32	BScope.Riskware.NetMon4Emp
ALYac	Application.ClassroomSpy.A
MAX	malware (ai score=72)
Malwarebytes	Generic.Malware/Suspicious
Ikarus	PUA.Monitor.ClassroomSpy
MaxSecure	Trojan.Malware.193295947.susgen
Fortinet	Riskware/ClassroomSpy

How to remove Application.ClassroomSpy.A?

Application.ClassroomSpy.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X