Spy

About “MSIL/Spy.Agent.DZC” infection

Malware Removal

The MSIL/Spy.Agent.DZC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Spy.Agent.DZC virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Collects information about installed applications
  • Binary compilation timestomping detected

How to determine MSIL/Spy.Agent.DZC?



File Info:

name: 3898CC0B1B6218022C9B.mlw
path: /opt/CAPEv2/storage/binaries/b6953f9cc3d6472d5bb693c74a770e420808c4f900a4f9836c383f6f6595f1c0
crc32: 64DB2273
md5: 3898cc0b1b6218022c9bd2cae11a167e
sha1: 1845f9b3b4e3f81022d37c06be7a609f698f600e
sha256: b6953f9cc3d6472d5bb693c74a770e420808c4f900a4f9836c383f6f6595f1c0
sha512: d5ae82a97b3cdc685fdcca9854bb31972fce12b60f8569018c66d4a79d42c2687d32ac141b6e24736b532940f07251eae40bc2475343e77df3da73c235c08e0e
ssdeep: 3072:/Av1dbIJj9p+UniySWGWx2UniyyUniya:odbIB6UfPQUOU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19F040AE0F774E949F024C67CF869D37026F9EF909572814539A07A3F2AAF2AC5C01AD5
sha3_384: 63d2c6eeb1b6e826657e2ab256e6b7472b1b6e8972a8bab51f57781021e6983c7ed54d828f482fd529493b1159978a60
ep_bytes: ff2500204000504b0102170b1400ffff
timestamp: 2078-04-26 22:19:06


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Microsoft Edge
FileVersion: 1.0.0.0
InternalName: msedge.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: msedge.exe
ProductName: Microsoft Edge
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Spy.Agent.DZC also known as:

BkavW32.AIDetectNet.01
MicroWorld-eScanTrojan.GenericKD.49326726
FireEyeTrojan.GenericKD.49326726
McAfeeArtemis!3898CC0B1B62
CylanceUnsafe
K7AntiVirusSpyware ( 005953b61 )
AlibabaTrojan:MSIL/Generic.e6ca024b
K7GWSpyware ( 005953b61 )
CyrenW32/MSIL_Agent.DNA.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Spy.Agent.DZC
APEXMalicious
Paloaltogeneric.ml
BitDefenderTrojan.GenericKD.49326726
AvastWin32:TrojanX-gen [Trj]
Ad-AwareTrojan.GenericKD.49326726
SophosGeneric PUA BI (PUA)
VIPRETrojan.GenericKD.49326726
McAfee-GW-EditionArtemis
EmsisoftTrojan.GenericKD.49326726 (B)
GDataTrojan.GenericKD.49326726
AviraTR/Spy.Agent.lwxtw
Antiy-AVLTrojan/Generic.ASMalwS.720E
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.C5198625
BitDefenderThetaGen:NN.ZemsilCO.34786.lm0@aiEbSkd
ALYacTrojan.GenericKD.49326726
MAXmalware (ai score=85)
MalwarebytesRiskWare.Agent
TrendMicro-HouseCallTROJ_GEN.R049H0CGA22
RisingSpyware.Agent!8.C6 (CLOUD)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.DZC!tr
AVGWin32:TrojanX-gen [Trj]

How to remove MSIL/Spy.Agent.DZC?

MSIL/Spy.Agent.DZC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment