MSIL/Spy.Keylogger.EHM removal

The MSIL/Spy.Keylogger.EHM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Spy.Keylogger.EHM virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Spy.Keylogger.EHM?


File Info:
crc32: 9858B9EE
md5: a15e490f2e484854806f065a26ba4c87
name: A15E490F2E484854806F065A26BA4C87.mlw
sha1: b88fdeb5e8f4ab606a383fc52be8d9036ec588fc
sha256: e3de1d1968f37f24cc8088c53b8ae68309875a0f87eb246d33480b0b83106670
sha512: 30b8e399b3f16dd87394843e7904cde4977384a0225fa09185dbfb9987164d054325ff7784512710612cfb6b11b765f966dcf2b070f189e8ce434c08c6fafafb
ssdeep: 96:Gg6aT6cgDLnOwcCzfm+EWdC8DvRZMrO2wzNt:bOX7vcmfmxy1vRZM7S
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Azimat.exe
FileVersion: 1.0.0.0
CompanyName: LCD - Company 2021
LegalTrademarks: 
Comments: Trek
ProductName: TREK LLC
ProductVersion: 1.0.0.0
FileDescription: Trek
OriginalFilename: Azimat.exe

MSIL/Spy.Keylogger.EHM also known as:

K7AntiVirus	Spyware ( 0057cfc31 )
Elastic	malicious (high confidence)
DrWeb	Trojan.KeyloggerNET.17
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Spyware ( 0057cfc31 )
Cybereason	malicious.5e8f4a
ESET-NOD32	a variant of MSIL/Spy.Keylogger.EHM
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan-Spy.MSIL.KeyLogger.gen
Tencent	Msil.Trojan-spy.Keylogger.Ljtu
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34692.am0@aWuRD8l
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.a15e490f2e484854
SentinelOne	Static AI – Malicious PE
Avira	TR/Spy.Gen8
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.MSIL.KeyLogger.l!c
GData	Win32.Trojan.Agent.K2K1DV
AhnLab-V3	Trojan/Win.Generic.C4491098
McAfee	Artemis!A15E490F2E48
TrendMicro-HouseCall	TROJ_GEN.R005H0CEP21
Ikarus	Trojan.MSIL.Spy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/KeyLogger.EHM!tr
AVG	Win32:Trojan-gen

How to remove MSIL/Spy.Keylogger.EHM?

MSIL/Spy.Keylogger.EHM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X