MSIL/Spy.Agent.BMC removal tips

The MSIL/Spy.Agent.BMC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Spy.Agent.BMC virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics
Unusual version info supplied for binary

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Spy.Agent.BMC?


File Info:
crc32: EE7D270E
md5: 6158a83dddc37ce4294b6d6a63c009bc
name: 6158A83DDDC37CE4294B6D6A63C009BC.mlw
sha1: cb18f43663f7fa60dc09e40f5f1d3294aedf6015
sha256: 6988e9e80592faf22f465bd315e9d1d2520085e5bca27687a6d72471200ee6ed
sha512: aaa637d84a1093471c55fe19ec6d8282f7683be80f6ebb90467732ef3797265122bc98a048f5d4a5acf20bc9f24b8ce119c9f607c4a099eaa7fb99e2d09cf5e6
ssdeep: 192:WHRFRJAmy16DrvJ2kwHPWzM2v9Vn3ZlC/4jeYKIW1r+aZsy85GPzjCmSECLOjfQ:gD/Amg6DrB2kUuFy4jeYs+aZ05eS2jI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Microsoft Corporation. All rights reserved xa9
Assembly Version: 10.0.16299.15
InternalName: svchost.exe
FileVersion: 10.0.16299.15
CompanyName: 
LegalTrademarks: 
Comments: x5eax5d4x5dcx5d9x5da x5dex5d0x5e8x5d7 x5e2x5d1x5d5x5e8 x5e9x5d9x5e8x5d5x5eax5d9 Windows
ProductName: x5eax5d4x5dcx5d9x5da x5dex5d0x5e8x5d7 x5e2x5d1x5d5x5e8 x5e9x5d9x5e8x5d5x5eax5d9 Windows
ProductVersion: 10.0.16299.15
FileDescription: svchost
OriginalFilename: svchost.exe

MSIL/Spy.Agent.BMC also known as:

K7AntiVirus	Spyware ( 0052c1ef1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ransom.PassCrypt.1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7GW	Spyware ( 0052c1ef1 )
Cybereason	malicious.dddc37
Cyren	W32/Trojan.DIS.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Spy.Agent.BMC
APEX	Malicious
Avast	Win32:GenMaliciousA-VFO [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.PassCrypt.1
NANO-Antivirus	Trojan.Win32.Fkm.ezmezj
MicroWorld-eScan	Gen:Variant.Ransom.PassCrypt.1
Tencent	Win32.Trojan.Generic.Wlzc
Ad-Aware	Gen:Variant.Ransom.PassCrypt.1
Sophos	Mal/Generic-S
Comodo	Malware@#35as1c7oq25dg
BitDefenderTheta	Gen:NN.ZemsilF.34686.bm0@aKRczmk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Ransom.PassCrypt.1
Emsisoft	Gen:Variant.Ransom.PassCrypt.1 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1105797
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Dynamer!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.Ransom.PassCrypt.1
AhnLab-V3	Trojan/Win32.Skeeyah.C2476476
McAfee	Artemis!6158A83DDDC3
MAX	malware (ai score=98)
VBA32	Trojan.MSIL.gen.a.1
Malwarebytes	Trojan.Crypt.Generic
Panda	Trj/GdSda.A
Rising	Spyware.Agent!8.C6 (CLOUD)
Yandex	Trojan.Agent!pM8tOdN30Qs
Ikarus	Trojan.MSIL.Spy
Fortinet	W32/Generic!tr
AVG	Win32:GenMaliciousA-VFO [Trj]
Paloalto	generic.ml

How to remove MSIL/Spy.Agent.BMC?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Spy.Agent.BMC removal tips