MSIL:Spyware-G [Spy] removal

The MSIL:Spyware-G [Spy] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL:Spyware-G [Spy] virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous .NET characteristics
• Network activity detected but not expressed in API logs

How to determine MSIL:Spyware-G [Spy]?

File Info:
name: 9D99FB94BA7E11D2800E.mlw
path: /opt/CAPEv2/storage/binaries/20f9c588a7ccf6e3c50ff17f49bed3bcefbfb241cc80503a1c88864db90e6d8a
crc32: 68E0CEDE
md5: 9d99fb94ba7e11d2800e45a40e860f93
sha1: 2b54d2ae3f9c43b8bf6a3859c4ead9c8d0895989
sha256: 20f9c588a7ccf6e3c50ff17f49bed3bcefbfb241cc80503a1c88864db90e6d8a
sha512: e7ec79674e4233ebe33bf158ccf01ddbe7d68bef5932cb707703396059858c3deaa58d3535f7003f1e90183901d3eb051edec31128c8d8fd0195428f69b8e72b
ssdeep: 1536:tvAfhl/abiBkVnVQ1LWsgiaaP72bNHuKAVOqw8CAJV4QfybXFB4X9Ssm8fpes7of:wabi+VILpaaP768VOqw8Cs4QabVecs6z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T170930264765C5740DAAA93BE48BA8685135CFB1FC68656DFC94B123B4BF22A01F30F09
sha3_384: db26a0095577b7ec5e352636e93f6c8b6cfa23c5ed6d3cd5766c59beba9fc629452c1baeb940a55e41b96230cd931191
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-04-17 18:47:30

Version Info:
Translation: 0x0000 0x04b0
Comments: RPX 1.3.4399.43191


FileDescription:  
FileVersion: 0.0.0.0
InternalName: Server.exe
LegalCopyright:  
OriginalFilename: Server.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

MSIL:Spyware-G [Spy] also known as:

How to remove MSIL:Spyware-G [Spy]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.