MonitoringTool:Win32/Despy removal

The MonitoringTool:Win32/Despy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MonitoringTool:Win32/Despy virus can do?

Unconventionial language used in binary resources: Russian
Authenticode signature is invalid

How to determine MonitoringTool:Win32/Despy?


File Info:
name: EEBF702ACB8C9E28E55C.mlw
path: /opt/CAPEv2/storage/binaries/54d575646c6cb06a1d7f2095cc867abe5b0d7d1a2040e86e236d5968ca61cba7
crc32: F24030B2
md5: eebf702acb8c9e28e55cda732e58df69
sha1: dd9de837bfdcc7f74fb4c3492869ac7783dffbf2
sha256: 54d575646c6cb06a1d7f2095cc867abe5b0d7d1a2040e86e236d5968ca61cba7
sha512: d0966b5be469881ff9cfcb92c9d1bcff950b43176679c3446f07996469e8b5de3dc938f55add681fa4066c3a20a39f5a3c9990c4a709e359dc0ff7b339415985
ssdeep: 12288:U/UevjCWi4lQJy+gQC17h6tpx6HiSZtzo+fRAWhSRC2JhUIyWB:U/UBJJrvQCS3LfRDSRC2JL1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4056B327EBA8036C81246349F2BAEB5293ABF017510174727B43D3DFEBA7423515E96
sha3_384: 3812a8670f5be5ee55bf08f46ffbbf270be9bb9db0ff9c731aaa0a2c55859cdf9132cdd6618b6372573bb40e227a33ac
ep_bytes: eb1066623a432b2b484f4f4b90e97cd3
timestamp: 2005-01-21 16:33:17

Version Info:
0: [No Data]

MonitoringTool:Win32/Despy also known as:

Lionic	Riskware.Win32.DesktopSpy.1!c
MicroWorld-eScan	Application.DesktopSpy.A
FireEye	Application.DesktopSpy.A
Skyhigh	Spyware-PD.a
Cylance	unsafe
Zillya	Backdoor.PePatch.Win32.106737
Sangfor	Spyware.Win32.Desktopspy.Vpkt
Alibaba	RiskWare:Win32/DesktopSpy.0f5ea745
K7GW	Trojan ( 0001140e1 )
K7AntiVirus	Trojan ( 0001140e1 )
Symantec	Spyware.DesktopSpy
ESET-NOD32	a variant of Win32/Monitor.DesktopSpy.A
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:Monitor.Win32.DesktopSpy
BitDefender	Application.DesktopSpy.A
NANO-Antivirus	Riskware.Win32.DesktopSpy.oatfm
Avast	Win32:Rootkit-gen [Rtk]
Tencent	Malware.Win32.Gencirc.13ac814e
Emsisoft	Application.DesktopSpy.A (B)
F-Secure	PotentialRisk.PUA/DesktopSpy.BD
VIPRE	Application.DesktopSpy.A
TrendMicro	Spyware_TRAK_DesktopSpyAgent
Sophos	Mal/Generic-S
Jiangmin	Monitor.DesktopSpy.a
Webroot	System.Monitor.Desktop.Scout
Varist	W32/Monitor.ISDR-1370
Avira	PUA/DesktopSpy.BD
Antiy-AVL	RiskWare[Monitor]/Win32.DesktopSpy
Microsoft	MonitoringTool:Win32/Despy
Xcitium	Malware@#oe3chq036p6l
Arcabit	Application.DesktopSpy.A
ZoneAlarm	not-a-virus:Monitor.Win32.DesktopSpy
GData	Application.DesktopSpy.A
Google	Detected
McAfee	Spyware-PD.a
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware/Suspicious
Panda	Application/DesktopSpy
TrendMicro-HouseCall	Spyware_TRAK_DesktopSpyAgent
Rising	Trojan.Bitrep!8.F596 (CLOUD)
MaxSecure	Trojan.Malware.6116.susgen
AVG	Win32:Rootkit-gen [Rtk]
DeepInstinct	MALICIOUS

How to remove MonitoringTool:Win32/Despy?

MonitoringTool:Win32/Despy removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X