Spy Trojan

Trojan-Spy.MSIL.Stealer.bpf removal

Malware Removal

The Trojan-Spy.MSIL.Stealer.bpf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.MSIL.Stealer.bpf virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Spy.MSIL.Stealer.bpf?


File Info:

crc32: E5612C5F
md5: 79512c583293a146a738ade39ec8c3c0
name: 79512C583293A146A738ADE39EC8C3C0.mlw
sha1: 39970ddafe350981bffdbd63aa5ede69dee6d2ae
sha256: dec05061330cdd96419eb3cddade5f8198f6c30e17551842a0c644e1642ddea1
sha512: c34aeb550cb8dbe1b0955c6a3d553d5dd8767c52c1f5375010ba4f16112eb4f6a6f7f81f411d588fcc11ef0f410d91b9d6b60092b1dcbb853c541a06d4cda3a2
ssdeep: 49152:LvBiXdKuQ+8nBlCX+LWZL2OEZLUDymeB6gRI:rBiXMuQFPCX+LMYUO7R
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) 2018 BitTorrent, Inc. All Rights Reserved.
InternalName: utweb
FileVersion: 1.2.2.3593
CompanyName:
ProductName: BitTorrent Web
ProductVersion: 1.2.2.3593
FileDescription:
Translation: 0x0409 0x0000

Trojan-Spy.MSIL.Stealer.bpf also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004befdb1 )
Elasticmalicious (high confidence)
DrWebTrojan.Inject3.4439
ALYacTrojan.GenericKD.37191684
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Stealer.9dee5400
K7GWTrojan ( 004befdb1 )
Cybereasonmalicious.afe350
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.EnigmaProtector.J suspicious
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyTrojan-Spy.MSIL.Stealer.bpf
BitDefenderTrojan.GenericKD.37191684
MicroWorld-eScanTrojan.GenericKD.37191684
Ad-AwareTrojan.GenericKD.37191684
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34790.ND0@aav5szhi
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.79512c583293a146
EmsisoftTrojan.GenericKD.37191684 (B)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Generic.ASBOL.C669
MicrosoftTrojan:MSIL/SpyNoon.RTU!MTB
GDataTrojan.GenericKD.37191684
McAfeeArtemis!79512C583293
MAXmalware (ai score=88)
VBA32Trojan.Zpevdo
TrendMicro-HouseCallTROJ_GEN.R002H01G521
RisingPUF.Pack-Enigma!1.BA33 (CLASSIC)
IkarusPUA.EnigmaProtector
FortinetRiskware/Stealer
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/TrojanSpy.Generic.HgIASX0A

How to remove Trojan-Spy.MSIL.Stealer.bpf?

Trojan-Spy.MSIL.Stealer.bpf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment