Categories: Spy

MSIL/Spy.Agent.AUS malicious file

The MSIL/Spy.Agent.AUS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Spy.Agent.AUS virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a hidden or system file

How to determine MSIL/Spy.Agent.AUS?


File Info:
crc32: 3EEDED85md5: 39f15e1f1cd7fd2ab1d7f0cd2d7ada94name: Scan Copy26042018,JPEG.exesha1: 6f0f88b28b0e06970306cb94cb3acf04a3a71973sha256: b27c248040351b85f805c45a12dd85396824a1a3388225138d46924a9edd3788sha512: 1b586bb83ff72e6ac6a00d522d259fc80c1d7c357586fef635a008da29ee4606229b8edc3b3f9eff47717cb184f5ed1f9e48c8a7172e254077742c3d7a04678bssdeep: 24576:wyVdOxLFDApSPKk48q506nH9ixFYGSKysohjfksmB50vWhM:3ViLFssPH48Pkitys1xHeWhtype: PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: Wextract                FileVersion: 8.00.7600.16385 (win7_rtm.090713-1255)CompanyName: Microsoft CorporationProductName: Windowsxae Internet ExplorerProductVersion: 8.00.7600.16385FileDescription: Win32 Cabinet Self-Extractor                                           OriginalFilename: WEXTRACT.EXE            .MUITranslation: 0x0409 0x04b0

MSIL/Spy.Agent.AUS also known as:

MicroWorld-eScan	Trojan.GenericKD.30714914
CAT-QuickHeal	Trojan.IGENERIC
McAfee	Artemis!39F15E1F1CD7
Cylance	Unsafe
Zillya	Trojan.Autoit.Win32.40527
K7GW	Trojan ( 0052a64a1 )
K7AntiVirus	Trojan ( 0052a64a1 )
Invincea	heuristic
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	TROJ_GEN.USE418
Paloalto	generic.ml
ClamAV	Win.Malware.Ototi-6591407-0
GData	Trojan.GenericKD.30714914
Kaspersky	Trojan.Win32.Autoit.abqtb
BitDefender	Trojan.GenericKD.30714914
NANO-Antivirus	Trojan.Win32.Generic.ewdpwt
AegisLab	Ml.Attribute.Gen!c
Tencent	Win32.Trojan.Autoit.Lnyf
Ad-Aware	Trojan.GenericKD.30714914
Sophos	Troj/Inject-CAN
F-Secure	Trojan.GenericKD.30714914
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.USE418
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
Emsisoft	Trojan.GenericKD.30714914 (B)
SentinelOne	static engine – malicious
Cyren	W32/Trojan.GLMO-4164
Avira	DR/Autoit.muaun
MAX	malware (ai score=97)
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Generic.D1D4AC22
ZoneAlarm	Trojan.Win32.Autoit.abqtb
Microsoft	Trojan:Win32/Skeeyah.A!rfn
AhnLab-V3	Malware/Win32.Generic.C2480156
ALYac	Trojan.GenericKD.30714914
AVware	Trojan.Win32.Generic!BT
VBA32	Trojan.Agentb
Panda	Trj/CI.A
Zoner	Trojan.Advml
ESET-NOD32	MSIL/Spy.Agent.AUS
Rising	Hack.Win32.SpyWare.aa (CLOUD)
Ikarus	Trojan.MSIL.Zyklon
Fortinet	W32/Inject.CAN!tr
AVG	Win32:Malware-gen
Cybereason	malicious.f1cd7f
Avast	Win32:Malware-gen
CrowdStrike	malicious_confidence_90% (D)
Qihoo-360	Win32/Trojan.bb0