Application.MSIL.ProxyHijacker.2 removal guide

The Application.MSIL.ProxyHijacker.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.MSIL.ProxyHijacker.2 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Application.MSIL.ProxyHijacker.2?


File Info:
name: E76EA2D925B22FEBACC3.mlw
path: /opt/CAPEv2/storage/binaries/d8adef224d60a83a8221b64254b99a4acffd2ba757a72d45b8b3e3ac5cfc2d9c
crc32: DD87973F
md5: e76ea2d925b22febacc316a3e6af0532
sha1: 26891ef350cc836162038bb3fbb84229f8d9c38b
sha256: d8adef224d60a83a8221b64254b99a4acffd2ba757a72d45b8b3e3ac5cfc2d9c
sha512: 2d48637bb219e3bbaced2fc2ee5365bc24039e7d603c6abff92e678a30f67fd98e50b7658a8b196cfefd808ee4726070a73c68074628418a675d4b1a9c44b917
ssdeep: 768:5KvPGMHaNifs243XEy2fq3YUsafS0Qs5EGMp:41a8s2yXD2fqotafS0qGMp
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T106135C4E528446BECAFC0671AC134651567BE92FAD81FB47ACC472BF09336E0C5129DE
sha3_384: 44f8a3c4893b84977131ba77f197c4718fa05d304cbe39f6dd33b329d448f14110ed572a48d65d26de8504ff3eae5d65
ep_bytes: ff250020400000000000000000000000
timestamp: 2015-04-20 07:52:37

Version Info:
Translation: 0x0000 0x04b0
Comments: Provides update functionality for installed applications.
CompanyName: InstallShield®
FileDescription: InstallShield® Application Updater
FileVersion: 15.4.2.5
InternalName: isupdate.exe
LegalCopyright: Copyright © InstallShield® 2014. All rights reserved.
OriginalFilename: isupdate.exe
ProductName: Application Updater
ProductVersion: 15.4.2.5
Assembly Version: 15.4.2.5

Application.MSIL.ProxyHijacker.2 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Application.MSIL.ProxyHijacker.2
FireEye	Gen:Variant.Application.MSIL.ProxyHijacker.2
Cybereason	malicious.925b22
APEX	Malicious
BitDefender	Gen:Variant.Application.MSIL.ProxyHijacker.2
Emsisoft	Gen:Variant.Application.MSIL.ProxyHijacker.2 (B)
VIPRE	Gen:Variant.Application.MSIL.ProxyHijacker.2
Trapmine	suspicious.low.ml.score
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Application.MSIL.ProxyHijacker.2
MAX	malware (ai score=96)
Arcabit	Trojan.Application.MSIL.ProxyHijacker.2
Panda	PUP/Generic
MaxSecure	Trojan.Malware.73616904.susgen
DeepInstinct	MALICIOUS
alibabacloud	Riskware:MSIL/ProxyHijacker

How to remove Application.MSIL.ProxyHijacker.2?

Application.MSIL.ProxyHijacker.2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X