Spy

MSIL/Spy.Keylogger.TC (file analysis)

Malware Removal

The MSIL/Spy.Keylogger.TC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/Spy.Keylogger.TC virus can do?

  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine MSIL/Spy.Keylogger.TC?



File Info:

name: 3A8E52504C092E52BF79.mlw
path: /opt/CAPEv2/storage/binaries/d1e3051ae21fb7ff584eb25cffd6f898a0ebe7c11f54acf5e47780ad50c09dcb
crc32: A01CE58C
md5: 3a8e52504c092e52bf7912681463e9c4
sha1: a40cd3d35c297a300ac8a9cb579c0782d43f1947
sha256: d1e3051ae21fb7ff584eb25cffd6f898a0ebe7c11f54acf5e47780ad50c09dcb
sha512: 555a938f922df690f58c3780a0a0f860184242cdadc7d9330fe7b7d045e9d119ff6d381a60e130c3201d2e3e0ffa246f77bfc0bcd06e7b3223dbbf1537deee3e
ssdeep: 768:Pp7lnDAB/pDnevKV8wM2XPre68v3Afj624kiZ+L5BlitqmwaLKIzYcHeIm:PphcTDm2fKPXiZI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169A39386534DD9AACDEA537D0593C23017739D485217D70B79E8BF2BBE76B020F806A2
sha3_384: 492ee1748a23e95c2327989e7848a85c5dc9cff4219bbcce34f96422384f9818ed7df7f00d7a5e4c531018d003a5eb55
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-06 09:16:45


Version Info:

Translation: 0x0000 0x04b0
FileDescription: Orzed
FileVersion: 1.0.0.0
InternalName: Orzed.exe
LegalCopyright: Copyright ©  2022
OriginalFilename: Orzed.exe
ProductName: Orzed
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Spy.Keylogger.TC also known as:

BkavW32.AIDetectNet.01
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.GenericKD.61199188
FireEyeGeneric.mg.3a8e52504c092e52
McAfeeRDN/Generic PWS.y
VIPRETrojan.GenericKD.61199188
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 700000121 )
AlibabaTrojan:MSIL/SpywareX.b7b18c4e
K7GWTrojan ( 700000121 )
Cybereasonmalicious.35c297
ArcabitTrojan.Generic.D3A5D354
CyrenW32/ABApplication.GTVL-3099
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Keylogger.TC
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKD.61199188
AvastWin32:SpywareX-gen [Trj]
TencentWin32.Trojan.Spy.Rimw
Ad-AwareTrojan.GenericKD.61199188
SophosMal/Generic-R + Mal/MSIL-AV
DrWebTrojan.KeyloggerNET.15
ZillyaTrojan.Keylogger.Win32.28
TrendMicroTROJ_GEN.R002C0PH822
McAfee-GW-EditionRDN/Generic PWS.y
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.61199188 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Spy.Gen
MAXmalware (ai score=81)
Antiy-AVLTrojan/Generic.ASMalwS.20F
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.61199188
GoogleDetected
AhnLab-V3Trojan/Win.PWS.C5220274
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.34698.gq0@aiDb2e
ALYacTrojan.GenericKD.61199188
VBA32Trojan.KeyloggerNET
TrendMicro-HouseCallTROJ_GEN.R002C0PH822
RisingTrojan.Generic/MSIL@AI.98 (RDM.MSIL:502pdfK0X1n4QFkvf6ANmg)
YandexTrojanSpy.Keylogger!soNEwt/mrJs
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan.Malware.186612953.susgen
FortinetW32/PossibleThreat
AVGWin32:SpywareX-gen [Trj]
PandaTrj/Chgt.AD
CrowdStrikewin/malicious_confidence_100% (W)

How to remove MSIL/Spy.Keylogger.TC?

MSIL/Spy.Keylogger.TC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment