Win64/Spy.Agent.CT removal guide

The Win64/Spy.Agent.CT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Spy.Agent.CT virus can do?

Authenticode signature is invalid

How to determine Win64/Spy.Agent.CT?


File Info:
name: D78DCF77383E43E39055.mlw
path: /opt/CAPEv2/storage/binaries/436b4f13fe70078c320a819307a3b3bc32aa3d5a51b07b67d4ccc7a83d7fdbc3
crc32: BCFA1959
md5: d78dcf77383e43e390556ad297b301b0
sha1: e29c1b323e1d74201aa31a60d5067b68e4a52c88
sha256: 436b4f13fe70078c320a819307a3b3bc32aa3d5a51b07b67d4ccc7a83d7fdbc3
sha512: cf99154c921e18ec233c55ddb0d26d424abb9e99f88816d3c024ecca010ea32f7962ca031209659ccb96596ea37ccf3088561ef27227a72238e32dc2d272a1cd
ssdeep: 6144:MXLx7eMnG/Nn/ZGA1rsmi1vFSe6MYCiv:zMnG/nJqT1vFSx1C
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1C5343A6F75A90CF9E5ABD13D8A938E06F776344A4361DACF0390422B1F47AE15E7E210
sha3_384: e837d76c4c0cefc58ba30992cd00ae9aab992cae03ffbd5ae40633a3afb9e1d27254bc181899c4f11211c02105fdd058
ep_bytes: 4883ec28e8af0600004883c428e972fe
timestamp: 2021-11-22 05:37:31

Version Info:
0: [No Data]

Win64/Spy.Agent.CT also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.47464875
McAfee	Artemis!D78DCF77383E
Cylance	Unsafe
K7GW	Spyware ( 005725531 )
ESET-NOD32	a variant of Win64/Spy.Agent.CT
BitDefender	Trojan.GenericKD.47464875
Avast	Win64:Trojan-gen
Ad-Aware	Trojan.GenericKD.47464875
Sophos	Generic PUA OC (PUA)
McAfee-GW-Edition	Artemis
FireEye	Trojan.GenericKD.47464875
Emsisoft	Trojan.GenericKD.47464875 (B)
GData	Trojan.GenericKD.47464875
MAX	malware (ai score=82)
Arcabit	Trojan.Generic.D2D441AB
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Trojan.GenericKD.47464875
Ikarus	Trojan.Win64.Spy
Fortinet	W64/Agent.CT!tr.spy
AVG	Win64:Trojan-gen

How to remove Win64/Spy.Agent.CT?

Win64/Spy.Agent.CT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X