Backdoor Spy

How to remove “Backdoor.MSIL.SpyGate.zhn”?

Malware Removal

The Backdoor.MSIL.SpyGate.zhn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.MSIL.SpyGate.zhn virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Backdoor.MSIL.SpyGate.zhn?


File Info:

crc32: 721B0147
md5: 834ef74ad8d6bacbcd88b9cb23b70baa
name: 834EF74AD8D6BACBCD88B9CB23B70BAA.mlw
sha1: 7b9641d9759afdcd6527d4d6f04d66dd4c0ee5de
sha256: 1df12693f9feea97f11832788e40089142fa1505611d7b87e0d6117e01f73de9
sha512: a0df0c5cffd16bebea9cb1a928b6d250c104ac5f99a603415429ffcc1c4d98440744da4aa54e629227462b356632f58de80fb377da2bd649a6a787c11ee57ec2
ssdeep: 1536:YoAHxKxa8DgKChQwJSf7mrFkh9sdN6e7A4BI:YoKxKxa8DgKaEzh9WNx75BI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: Cripeter.exe
FileVersion: 1
ProductVersion: 1
FileDescription:
OriginalFilename: Cripeter.exe

Backdoor.MSIL.SpyGate.zhn also known as:

K7AntiVirusTrojan ( 004b0bd61 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader14.28368
CynetMalicious (score: 99)
ALYacGen:Heur.MSIL.Abuja.1
CylanceUnsafe
SangforBackdoor.MSIL.SpyGate.zhn
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004b0bd61 )
Cybereasonmalicious.ad8d6b
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.AOC
APEXMalicious
AvastWin32:Malware-gen
KasperskyBackdoor.MSIL.SpyGate.zhn
BitDefenderGen:Heur.MSIL.Abuja.1
NANO-AntivirusTrojan.Win32.SpyGate.ezirzn
MicroWorld-eScanGen:Heur.MSIL.Abuja.1
TencentMsil.Backdoor.Spygate.Dygk
Ad-AwareGen:Heur.MSIL.Abuja.1
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34266.jq0@aixlasb
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGeneric.dra
FireEyeGeneric.mg.834ef74ad8d6bacb
EmsisoftGen:Heur.MSIL.Abuja.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/Generic.ASMalwS.252F801
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.MSIL.Abuja.1
GDataMSIL.Trojan.Injector.KH
McAfeeGeneric.dra
MAXmalware (ai score=94)
PandaTrj/GdSda.A
IkarusTrojan-Downloader
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.PGR!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Backdoor.MSIL.SpyGate.zhn?

Backdoor.MSIL.SpyGate.zhn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment