Spy

Should I remove “MSIL.Spy.1”?

Malware Removal

The MSIL.Spy.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL.Spy.1 virus can do?

  • Network activity detected but not expressed in API logs

How to determine MSIL.Spy.1?


File Info:

crc32: A16DBEBC
md5: 76eb5e8cf846591e21f48e84d578afdf
name: 76EB5E8CF846591E21F48E84D578AFDF.mlw
sha1: 2509b1f05ffeca57886636ded5d0ca635f8f9447
sha256: ae0609753775b1f991a084c8c8437b4be9f3692f7505d5260c5c759ebbff7c93
sha512: 220f36c1b118281d89953848e5f6996fffd292e67a46297aaf6bc26577aa5c8a3127be9fd561da0f9e4c4fb0709f89cd4cb2a2fb58269dd2649d41787d947bde
ssdeep: 6144:zTm3ifTx6KfYH7t3B33DGXnKXsuqXpwrPgK4dqlGCqqDL:zi0x6KfePTMniMp8nRI3qn
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2006-2016
InternalName: FileZilla 3
FileVersion: 3, 27, 1, 0
CompanyName: FileZilla Project
Comments: Version 3.27.1
ProductName: FileZilla
ProductVersion: 3, 27, 1, 0
FileDescription:
OriginalFilename: filezilla.exe
Translation: 0x0000 0x04b0

MSIL.Spy.1 also known as:

K7AntiVirusSpyware ( 004bf53c1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ClamAVWin.Packed.Enigma-9832639-0
ALYacGen:Variant.MSIL.Spy.1
MalwarebytesSimbot.Backdoor.Stealer.DDS
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Stelega.d68ff080
K7GWSpyware ( 004bf53c1 )
Cybereasonmalicious.cf8465
BitDefenderThetaGen:NN.ZemsilF.34796.Cq0@aKWa@ld
CyrenW32/Agent.CGM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.AES
ZonerTrojan.Win32.107755
APEXMalicious
AvastWin32:RATX-gen [Trj]
CynetMalicious (score: 99)
KasperskyHEUR:Worm.Win32.VBNA.gen
BitDefenderGen:Variant.MSIL.Spy.1
NANO-AntivirusTrojan.Win32.Packed2.ikmywf
MicroWorld-eScanGen:Variant.MSIL.Spy.1
Ad-AwareGen:Variant.MSIL.Spy.1
SophosMal/Generic-R + Mal/SpyNoon-A
DrWebTrojan.Packed2.42735
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R007C0DGI21
McAfee-GW-EditionPWS-FCVT!76EB5E8CF846
FireEyeGeneric.mg.76eb5e8cf846591e
EmsisoftGen:Variant.MSIL.Spy.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.gsutv
AviraHEUR/AGEN.1142973
Antiy-AVLTrojan/Generic.ASMalwS.314C4D9
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:MSIL/SpyNoon.RTU!MTB
GridinsoftTrojan.Win32.Agent.sd!ni
GDataGen:Variant.MSIL.Spy.1
AhnLab-V3Malware/Win32.RL_Generic.C4327266
McAfeePWS-FCVT!76EB5E8CF846
MAXmalware (ai score=89)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R007C0DGI21
YandexTrojan.Igent.bVj8Sa.25
IkarusTrojan-Spy.DCRat
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.ADBF!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/TrojanPSW.Stelega.HgIASOwA

How to remove MSIL.Spy.1?

MSIL.Spy.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment