What is "Trojan-Spy.MSIL.HiveMon"?

The Trojan-Spy.MSIL.HiveMon is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.MSIL.HiveMon virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Spy.MSIL.HiveMon?


File Info:
crc32: 087D6A8D
md5: d36537604871b3550a9c5c635c37a601
name: upload_file
sha1: a5360105e7b4d5316c88e5403013dd395c1ab145
sha256: 4f3145508f4292ca3bfb6d9d4284b50df0834743676e6b951e71b4248d0d1a72
sha512: 8b0c31bae27b95ee726fb77a2e0c6b82e599f73ad93d0fcf8c853cca2daf285796d0175ea1d5e0cfb3a40d5b80958a6c1d821b10eb241cba95a7c909ffe04df9
ssdeep: 12288:Ktw5o2kGIioMyQEwaQSAY/YRHBOm487UOUc:awoRGItiEwRFY/eglsUc
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) BreakPoint Software
InternalName: hw_v6.8.0.5419
FileVersion: 6.8.0.5419
CompanyName: BreakPoint Software
ProductName: Hex Workshop v6.8
ProductVersion: 6.8.0.5419
FileDescription: Hex Workshop v6.8 Installer
OriginalFileName: hw_v6.8.0.5419.exe
Translation: 0x0409 0x04b0

Trojan-Spy.MSIL.HiveMon also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35066940
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.35066940
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5e7b4d
Arcabit	Trojan.Generic.D2A44DBC
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.HiveMon.gen
Alibaba	TrojanSpy:MSIL/HiveMon.b25ac4dc
ViRobot	Trojan.Win32.Z.Outbreak.948864
Tencent	Msil.Trojan-spy.Hivemon.Wpsv
Ad-Aware	Trojan.GenericKD.35066940
Emsisoft	Trojan.GenericKD.35066940 (B)
F-Secure	Heuristic.HEUR/AGEN.1139259
DrWeb	Trojan.DownLoader35.11127
McAfee-GW-Edition	RDN/Generic PWS.y
FireEye	Generic.mg.d36537604871b355
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.Keylogger.AgentTesla
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1139259
MAX	malware (ai score=88)
Gridinsoft	Trojan.Win32.Gen.oa
Microsoft	Trojan:Win32/Woreflint.A!cl
ZoneAlarm	HEUR:Trojan-Spy.MSIL.HiveMon.gen
GData	Win32.Backdoor.FireBirdRat.V2H6P3
Cynet	Malicious (score: 90)
ALYac	Trojan.GenericKD.35066940
Malwarebytes	Spyware.PasswordStealer
Panda	Trj/GdSda.A
ESET-NOD32	MSIL/Spy.Agent.CSS
eGambit	PE.Heur.InvalidSig
Fortinet	Malicious_Behavior.SB
BitDefenderTheta	Gen:NN.ZemsilF.34590.5m1@aq7mwroi
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Trojan-Spy.MSIL.HiveMon?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan-Spy.MSIL.HiveMon”?