Spy Trojan

What is “Trojan:Win32/SpyEyes.AG!MTB”?

Malware Removal

The Trojan:Win32/SpyEyes.AG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/SpyEyes.AG!MTB virus can do?

  • Unconventionial language used in binary resources: Faeroese
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/SpyEyes.AG!MTB?


File Info:

crc32: CF81E650
md5: a4d06844d2cb6555d28d7160044df583
name: b.exe
sha1: bb25fc9c6bd3b6260d05b03fffbec75e679a81a9
sha256: cfb4266735f9806e94537f71a1e289ce6db041484159c07be6a8d5b3ce12abf9
sha512: bf3dd5469cfe2093505373a3ce7d322b6057fa367462b55be43b173febf1021d66b430f98ad78a497d2db93244b8a4f739136e5e680c9d2706383151c899cfc1
ssdeep: 1536:i3ifGPxgP8nnu6J9IKGsB6MBNTTrlhrk8D8ccrr8O61W4qSHfj34BFVnSWH1YI2:i3FpU6J9HHBNTTrz+gtiHnZVYaOhRx+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/SpyEyes.AG!MTB also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanTrojan.GenericKD.43036899
FireEyeGeneric.mg.a4d06844d2cb6555
CAT-QuickHealTrojandownloader.Buerak
ALYacTrojan.GenericKD.43036899
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderTrojan.GenericKD.43036899
K7GWTrojan ( 0056558b1 )
Cybereasonmalicious.c6bd3b
TrendMicroTROJ_GEN.R015C0DDQ20
SymantecTrojan.Gen.2
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Agent-7687597-0
GDataWin32.Trojan-Stealer.TinyNuke.II7X2L
KasperskyTrojan-Downloader.Win32.Buerak.jf
AlibabaTrojanDownloader:Win32/Buerak.82cdbd33
TencentWin32.Trojan-downloader.Buerak.Lnxo
Ad-AwareTrojan.GenericKD.43036899
SophosMal/Generic-S
Invinceaheuristic
McAfee-GW-EditionPacked-GAV!A4D06844D2CB
MaxSecureTrojan.Malware.300983.susgen
Trapminesuspicious.low.ml.score
EmsisoftTrojan.GenericKD.43036899 (B)
IkarusTrojan.Win32.Crypt
CyrenW32/Trojan.KYOB-4330
WebrootW32.Malware.Gen
Antiy-AVLTrojan[Downloader]/Win32.Buerak
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D290B0E3
AegisLabTrojan.Win32.Buerak.a!c
ZoneAlarmTrojan-Downloader.Win32.Buerak.jf
MicrosoftTrojan:Win32/SpyEyes.AG!MTB
AhnLab-V3Trojan/Win32.MalPe.R333951
Acronissuspicious
McAfeePacked-GAV!A4D06844D2CB
MAXmalware (ai score=82)
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HCXF
TrendMicro-HouseCallTROJ_GEN.R015C0DDQ20
RisingTrojan.Kryptik!1.C566 (CLOUD)
eGambitUnsafe.AI_Score_69%
FortinetW32/GenKryptik.EJBR!tr
BitDefenderThetaGen:NN.ZexaF.34106.nqW@a87psNbG
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Downloader.b96

How to remove Trojan:Win32/SpyEyes.AG!MTB?

Trojan:Win32/SpyEyes.AG!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment