Categories: Spy

How to remove “Win32/Spy.Agent.POX”?

The Win32/Spy.Agent.POX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Spy.Agent.POX virus can do?

  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Win32/Spy.Agent.POX?


File Info:

crc32: 76338363md5: d160d0845b654c3aa23552ac0a3725a7name: D160D0845B654C3AA23552AC0A3725A7.mlwsha1: a9cc72e785cbd46abcdf7cf90f57beca46c29fabsha256: 0e6fadc64284167473bfc8eb22987852a8a8e8cb323548d2e2efdfb26354adb3sha512: 112c6a9b296db6d51cb49cb2a1a1ff0dcb9c2a7650fe9b2883405ce0cca50723c1d1a7879b18c31c920c0795f03733fb4104db42619ff80a3a770e0cd4911649ssdeep: 24576:EfKNFce//g1AnmWlpavbVZ00nMMqIemSeWJjnjhV6f6YqT7k8:EflQtajVeyMXgs/H6f6YqTw8type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Spy.Agent.POX also known as:

Bkav W32.AIDetectVM.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.40897242
FireEye Trojan.GenericKD.40897242
McAfee PWS-FCNU!D160D0845B65
Cylance Unsafe
Zillya Trojan.Fsysna.Win32.16877
K7AntiVirus Riskware ( 0040eff71 )
Alibaba TrojanSpy:Win32/Fsysna.5f3d20af
K7GW Riskware ( 0040eff71 )
Cybereason malicious.45b654
Invincea Mal/Generic-S
BitDefenderTheta Gen:NN.ZexaF.34634.JwW@a4WozKli
Symantec ML.Attribute.HighConfidence
APEX Malicious
Kaspersky Trojan.Win32.Fsysna.ezcy
BitDefender Trojan.GenericKD.40897242
NANO-Antivirus Trojan.Win32.Fsysna.fmzjpq
Paloalto generic.ml
Rising Trojan.Generic@ML.95 (RDMK:GMJV6VavN+O6D/IeyGXbMA)
Ad-Aware Trojan.GenericKD.40897242
Emsisoft Trojan.GenericKD.40897242 (B)
F-Secure Heuristic.HEUR/AGEN.1102515
DrWeb Trojan.DownLoader30.28350
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition PWS-FCNU!D160D0845B65
Sophos Mal/Generic-S
Ikarus Trojan-Spy.Agent
GData Trojan.GenericKD.40897242
Jiangmin Trojan.Fsysna.lkl
Avira HEUR/AGEN.1102515
Antiy-AVL Trojan/Win32.Fsysna
Arcabit Trojan.Generic.D2700ADA
AegisLab Trojan.Win32.Fsysna.4!c
ZoneAlarm Trojan.Win32.Fsysna.ezcy
Microsoft TrojanSpy:Win32/Fsysna.RL!MTB
Cynet Malicious (score: 85)
AhnLab-V3 Malware/Gen.Generic.C2921383
VBA32 Trojan.Fsysna
ALYac Trojan.Agent.Fsysna
TACHYON Trojan/W32.Fsysna.2681344
ESET-NOD32 a variant of Win32/Spy.Agent.POX
Tencent Malware.Win32.Gencirc.114d76d1
eGambit Unsafe.AI_Score_99%
Fortinet W32/Fsysna.EZCY!tr
MaxSecure Trojan.Malware.73763370.susgen
AVG FileRepMalware
Panda Trj/GdSda.A
CrowdStrike win/malicious_confidence_60% (W)
Qihoo-360 Win32/Backdoor.f0a

How to remove Win32/Spy.Agent.POX?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Trojan.Win32.Agent.xbnsym removal guide

The Trojan.Win32.Agent.xbnsym is considered dangerous by lots of security experts. When this infection is active,…

1 min ago

Backdoor:Win32/AsyncRAT removal tips

The Backdoor:Win32/AsyncRAT is considered dangerous by lots of security experts. When this infection is active,…

7 mins ago

Win32:VB-NPD [Wrm] removal instruction

The Win32:VB-NPD [Wrm] is considered dangerous by lots of security experts. When this infection is…

16 mins ago

About “Symmi.4579” infection

The Symmi.4579 is considered dangerous by lots of security experts. When this infection is active,…

17 mins ago

What is “Lazy.487114”?

The Lazy.487114 is considered dangerous by lots of security experts. When this infection is active,…

23 mins ago

Malware.AI.91208316 (file analysis)

The Malware.AI.91208316 is considered dangerous by lots of security experts. When this infection is active,…

33 mins ago