How to remove “Legitimate.Spycar”?

The Legitimate.Spycar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Legitimate.Spycar virus can do?

Anomalous binary characteristics

How to determine Legitimate.Spycar?


File Info:
crc32: 44BC79F0
md5: 19de26709ba4757d531c55044f1e096a
name: 19DE26709BA4757D531C55044F1E096A.mlw
sha1: 7886b739654dd86fdecaa28900dda9372d1cf2e7
sha256: 76e9875c10d64e91774d1d8a2cf4dbec375227e20e631c9c122cfe792b82d8f7
sha512: 3f79392c4d2f807410a7d14002cc92e36f9d95c96e2e740e6ffcfae89667a08b5412025f15e3e7a1523e2b77cfa8659ea8294ae31942ff7bd13533e1e3b30131
ssdeep: 96:iBQFRQ9hPiQnLG9RWaQJNaInZUVDlMp33Tjdr2g4qx1WhqilJOQGJ6UgxzCyJ:iWRQKOk+rZUVDlMH5dkOXq9h
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2006
ProductName: Spycar
FileDescription: Part of the SPYCAR antispyware test suite
FileVersion: 1, 0, 0, 0
CompanyName: Intelguardians Network Intelligence, LLC
Translation: 0x0409 0x04b0

Legitimate.Spycar also known as:

K7AntiVirus	JokeProgram ( 0055e3f31 )
DrWeb	Joke.Forgery.2716
Cynet	Malicious (score: 100)
CMC	Generic.Win32.19de26709b!CMCRadar
Cylance	Unsafe
Zillya	Tool.Spycar.Win32.6
Sangfor	Malware
Alibaba	RiskWare:Win32/Spycar.e489227a
K7GW	JokeProgram ( 0055e3f31 )
Cybereason	malicious.09ba47
TrendMicro	SPYCAR_TEST_FILE
Cyren	W32/Joke.KHWS-7841
Symantec	SecurityRisk.Dropper
ESET-NOD32	a variant of Win32/Hoax.Spycar.A
APEX	Malicious
TotalDefense	Spycar A testing tool for Spyware Behavior
Avast	Win32:Spycar [Trj]
ClamAV	Win.Trojan.Agent-1427797
Kaspersky	Hoax.Win32.Spycar.a
BitDefender	Gen:Variant.Application.Graftor.46284
NANO-Antivirus	Riskware.Win32.Spycar.cwnzhq
SUPERAntiSpyware	Unclassified.SpyCar[AntiSpywareTest]
MicroWorld-eScan	Gen:Variant.Application.Graftor.46284
Ad-Aware	Gen:Variant.Application.Graftor.46284
Sophos	Spycar (PUA)
Comodo	Application.Win32.Spycar.a@4qb0vw
VIPRE	Spycar
Invincea	Spycar (PUA)
McAfee-GW-Edition	SpyCar test
FireEye	Generic.mg.19de26709ba4757d
Emsisoft	Gen:Variant.Application.Graftor.46284 (B)
Jiangmin	Hoax.Spycar.e
Webroot	Adware.Spycar-test
Antiy-AVL	HackTool[Hoax]/Win32.Spycar
Microsoft	Trojan:Win32/Occamy.C76
Arcabit	Trojan.Application.Graftor.DB4CC
AegisLab	Hacktool.Win32.Spycar.3!c
ZoneAlarm	Hoax.Win32.Spycar.a
GData	Gen:Variant.Application.Graftor.46284
TACHYON	Joke/W32.Spycar.10240.C
AhnLab-V3	Trojan/Win32.Xema.C50629
McAfee	Artemis!19DE26709BA4
MAX	malware (ai score=100)
Malwarebytes	Legitimate.Spycar
Panda	Application/SpycarTest
TrendMicro-HouseCall	SPYCAR_TEST_FILE
Rising	Trojan.Occamy!8.F1CD (TFE:2:ePtcaPmu5wN)
Yandex	Hoax.Spycar!Qb4i5evZJDM
Ikarus	not-a-virus:Spycar-Testsuit
MaxSecure	Trojan.Malware.1110702.susgen
Fortinet	Riskware/Spycar
AVG	Win32:Spycar [Trj]
Qihoo-360	Win32.Agent.sz.rgrk

How to remove Legitimate.Spycar?

Legitimate.Spycar removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X