Should I remove “MSIL/Spy.Small.CA”?

The MSIL/Spy.Small.CA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Spy.Small.CA virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine MSIL/Spy.Small.CA?


File Info:
name: E57C1484B1DD1C26EF2E.mlw
path: /opt/CAPEv2/storage/binaries/02c394d39faaf1febe70cfaf55eaf7fe42f64b438ac6954bcdc434ba25ff2824
crc32: 7C462D64
md5: e57c1484b1dd1c26ef2ef9ca80256129
sha1: 284ac3fc2c73209bc031760a000e0c113b493e05
sha256: 02c394d39faaf1febe70cfaf55eaf7fe42f64b438ac6954bcdc434ba25ff2824
sha512: 2a6c275e9014e28901d8d3901ad5c60c4816e329b43af3d0efe37e13a898c111de93611206ba7d4fb6112c22bfaab4245e8e1497ed31a3c125b1f0af301adafd
ssdeep: 192:JlpxP3XLBfyMyAvfuITHCTEF2HploW1jY2A:Jh1fyWHuOHzFmQ2M2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EB22C52777E8C735E6BF0B769873414107B2F70588A2CB1E9EC9445E9A6370146A3BA2
sha3_384: a967ddf9a70927a0e5881f26cb4049176f1e66467a21d9c558e0cdcb08343536af79ce4f67b93f53c1849d336afa9024
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-03-22 15:16:59

Version Info:
Translation: 0x0000 0x04b0
FileDescription: dosyalarim.exe
FileVersion: 1.0.0.0
InternalName: dosyalarim.exe.exe
LegalCopyright: Copyright ©  2018
OriginalFilename: dosyalarim.exe.exe
ProductName: dosyalarim.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Spy.Small.CA also known as:

Lionic	Trojan.Win32.Generic.4!c
Cylance	Unsafe
Sangfor	Trojan.MSIL.Small.CA
K7AntiVirus	Spyware ( 0051d0b11 )
Alibaba	Trojan:MSIL/Generic.abcbde94
K7GW	Spyware ( 0051d0b11 )
Cybereason	malicious.c2c732
BitDefenderTheta	Gen:NN.ZemsilCO.34606.am0@a4PDNbb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Small.CA
TrendMicro-HouseCall	TROJ_GEN.R002H0CKB21
Paloalto	generic.ml
NANO-Antivirus	Trojan.Win32.Small.ezcirq
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Razy.Ajvg
Comodo	Malware@#1j4yy6ckek1xz
Zillya	Trojan.Small.Win32.40766
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Suspicious PE
Sophos	Mal/Generic-S
APEX	Malicious
Avira	TR/Spy.Small.ocayj
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!E57C1484B1DD
MAX	malware (ai score=94)
Ikarus	Trojan.MSIL.Spy
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Small.CA!tr.spy
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove MSIL/Spy.Small.CA?

MSIL/Spy.Small.CA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X