Spy

MSIL/Spy.Agent.DTX malicious file

Malware Removal

The MSIL/Spy.Agent.DTX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Spy.Agent.DTX virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine MSIL/Spy.Agent.DTX?


File Info:

name: 3F02EB07764A2E814E2D.mlw
path: /opt/CAPEv2/storage/binaries/c360c87b571b0759477878e63a4a450b6250924dacc0af40be613e219688febf
crc32: 90FFB0BC
md5: 3f02eb07764a2e814e2dfeed9f8fea68
sha1: d2f383cf8ad0c7ab58188ed4f4104d893c73ecf0
sha256: c360c87b571b0759477878e63a4a450b6250924dacc0af40be613e219688febf
sha512: d83986ac27b9164c3a75c2f36d220978cdc24852301d095acf3948e77791ff442c6724d8d0bac690f3033040c606c8602c8872faaaeaa8360a3166221079a22d
ssdeep: 24576:PaQQViHS1Sowa+yMVJHmt21tmc5/0M0R60B/UJE9huM7q:CQWJUNwc5/07w0BtSM7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DB557B067A64CE0AD0691B33C4EFC11847ECAD827A66D75A7E8B33AC21413E75D4E5CE
sha3_384: 9e78b461204d3bb92c3f593bf50136fadc7fe7e6ae15235f61becfc670dbfeee52c58ef5b62a1b10bf53fb0e252c4608
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-02-26 22:21:24

Version Info:

FileVersion: 2020.4.11.16511847
ProductVersion: 2020.4.11.16511847
Unity Version: 2020.4.11f1_fbf367ac14e9
Translation: 0x0409 0x04b0

MSIL/Spy.Agent.DTX also known as:

BkavW32.AIDetectNet.01
LionicTrojan.MSIL.Stealer.l!c
tehtrisGeneric.Malware
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILMamut.781
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusSpyware ( 0058ef511 )
AlibabaTrojanSpy:MSIL/Stealer.fc4f4fb1
K7GWSpyware ( 0058ef511 )
Cybereasonmalicious.7764a2
CyrenW32/MSIL_Agent.CZA.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Spy.Agent.DTX
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderIL:Trojan.MSILMamut.781
NANO-AntivirusTrojan.Win32.Stealer.jmsfdi
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
MicroWorld-eScanIL:Trojan.MSILMamut.781
AvastWin32:MalwareX-gen [Trj]
TencentTrojan-Spy.Msil.Stealer.fe
Ad-AwareIL:Trojan.MSILMamut.781
SophosMal/Generic-S
F-SecureTrojan.TR/Spy.Agent.aymjn
TrendMicroTROJ_GEN.R002C0WC422
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.3f02eb07764a2e81
EmsisoftIL:Trojan.MSILMamut.781 (B)
SentinelOneStatic AI – Malicious PE
GDataIL:Trojan.MSILMamut.781
AviraTR/Spy.Agent.aymjn
Antiy-AVLTrojan[Spy]/MSIL.Stealer
ArcabitIL:Trojan.MSILMamut.781
ViRobotTrojan.Win32.Z.Agent.1351680.QS
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3Trojan/Win.MSILZilla.C4982822
Acronissuspicious
McAfeeTrojan-FUJL!3F02EB07764A
MAXmalware (ai score=89)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.PasswordStealer
TrendMicro-HouseCallTROJ_GEN.R002C0WC422
RisingTrojan.Generic/MSIL@AI.94 (RDM.MSIL:hep6z6JQukJtjSihLfFEdg)
YandexTrojanSpy.Agent!CASEsFtAHIc
IkarusTrojan.MSIL.Spy
FortinetMSIL/Agent.DTR!tr.spy
BitDefenderThetaGen:NN.ZemsilF.34638.sr0@aGNFXQhi
AVGWin32:MalwareX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSIL/Spy.Agent.DTX?

MSIL/Spy.Agent.DTX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment