Backdoor Spy

Backdoor.MSIL.SpyGate.alic malicious file

Malware Removal

The Backdoor.MSIL.SpyGate.alic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.MSIL.SpyGate.alic virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz
gobiernodecanarias.net

How to determine Backdoor.MSIL.SpyGate.alic?


File Info:

crc32: E7A430A1
md5: ac847b0e7196bd6cd810c675b62f147f
name: AC847B0E7196BD6CD810C675B62F147F.mlw
sha1: d6a29a8ae6059932e4b06fda89b81cff5c13d22f
sha256: cb2ab2997a7fa24263306c8c75957d05dc5ba9aa06f031b16193aa9475f1bcf5
sha512: 5d880dba40970874bf93a1a88e2c672dae8a7edc12553774ec39817880dc1342afb2d318acf97d16e1f23d865b77b1d97ab66fbf86188718f875e817ca437dbe
ssdeep: 768:dHd9XaoA7uVGXuA3d3/wZUXBfv1rkk9jQi4a:dfXaoA7u6QZsBSk9UiD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: run3.exe
FileVersion: 1
ProductVersion: 1
FileDescription:
OriginalFilename: run3.exe

Backdoor.MSIL.SpyGate.alic also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.46426324
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaBackdoor:MSIL/SpyGate.8a7cb08f
K7GWRiskware ( 0040eff71 )
APEXMalicious
AvastWin32:Malware-gen
KasperskyBackdoor.MSIL.SpyGate.alic
BitDefenderTrojan.GenericKD.46426324
MicroWorld-eScanTrojan.GenericKD.46426324
TencentMsil.Backdoor.Spygate.Lpbg
Ad-AwareTrojan.GenericKD.46426324
BitDefenderThetaGen:NN.ZemsilF.34722.cm0@aqctlhf
TrendMicroTROJ_GEN.R002C0PF621
FireEyeGeneric.mg.ac847b0e7196bd6c
EmsisoftTrojan.GenericKD.46426324 (B)
SentinelOneStatic AI – Suspicious PE
AviraBDS/SpyGate.dryct
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Generic.D2C468D4
AegisLabTrojan.MSIL.SpyGate.m!c
GDataTrojan.GenericKD.46426324
McAfeeRDN/Generic PWS.y
MAXmalware (ai score=88)
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PF621
IkarusTrojan-Ransom.Samas
MaxSecureTrojan.Malware.300983.susgen
FortinetMalicious_Behavior.SB
AVGWin32:Malware-gen

How to remove Backdoor.MSIL.SpyGate.alic?

Backdoor.MSIL.SpyGate.alic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment