Spy Trojan

Trojan-Spy.MSIL.Stealer.bpt (file analysis)

Malware Removal

The Trojan-Spy.MSIL.Stealer.bpt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.MSIL.Stealer.bpt virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Spy.MSIL.Stealer.bpt?


File Info:

crc32: 8A981190
md5: 14bb5e34870da981d9eacc490cbb80c3
name: 14BB5E34870DA981D9EACC490CBB80C3.mlw
sha1: 995d317778f51d807004fb7f9127763e6de6e5e0
sha256: 6718c04021467956503e7c53e7a6597fad77eafe88b080442d4168ab1081f32c
sha512: 10a1dc6217d6fd6ab8b433b8e20c16d808a4910dcefe47afaf8a9a918b51615f5a5027abb52a371fdbaabc359b1c9a1d711c54130dede625a65085843a851c2e
ssdeep: 49152:h138C2L6tZyJAH1scJT4KgrPCUXUfI8/w9:h138x6tZyOmW4VjkwR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) 2018 BitTorrent, Inc. All Rights Reserved.
InternalName: utweb
FileVersion: 1.2.2.3593
CompanyName:
ProductName: BitTorrent Web
ProductVersion: 1.2.2.3593
FileDescription:
Translation: 0x0409 0x0000

Trojan-Spy.MSIL.Stealer.bpt also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004befdb1 )
LionicTrojan.MSIL.Stealer.l!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.29533
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.37210818
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:MSIL/SpyNoon.2de36bce
K7GWTrojan ( 004befdb1 )
Cybereasonmalicious.778f51
CyrenW32/Trojan.IGVD-9005
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.EnigmaProtector.J suspicious
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Fileinfector-9838335-0
KasperskyTrojan-Spy.MSIL.Stealer.bpt
BitDefenderTrojan.GenericKD.37210818
MicroWorld-eScanTrojan.GenericKD.37210818
Ad-AwareTrojan.GenericKD.37210818
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34790.MD0@a81eqgki
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.14bb5e34870da981
EmsisoftTrojan.GenericKD.37210818 (B)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Generic.ASBOL.C669
MicrosoftTrojan:MSIL/SpyNoon.RTU!MTB
ArcabitTrojan.Generic.D237CAC2
ZoneAlarmTrojan-Spy.MSIL.Stealer.bpt
GDataWin32.Backdoor.DCRat.MPZ25Q
McAfeeArtemis!14BB5E34870D
MAXmalware (ai score=99)
VBA32Trojan.Zpevdo
MalwarebytesSpyware.PasswordStealer
TrendMicro-HouseCallTROJ_GEN.R002H01G821
RisingPUF.Pack-Enigma!1.BA33 (CLASSIC)
IkarusTrojan.Win32.Enigma
FortinetRiskware/Application
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HxIBdY8A

How to remove Trojan-Spy.MSIL.Stealer.bpt?

Trojan-Spy.MSIL.Stealer.bpt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment