Malware

Application.KeyLogger.QSZ removal tips

Malware Removal

The Application.KeyLogger.QSZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.KeyLogger.QSZ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Starts servers listening on 127.0.0.1:0
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Sniffs keystrokes
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Application.KeyLogger.QSZ?


File Info:

crc32: DF90A71E
md5: 58690bc98760e13cacf1daba896e35e6
name: wink_installer_free.exe
sha1: b21745e68b13693e1badae545470969e4f2a80a3
sha256: d7f29e7c674ff65ce561a353d0f88a6f625292d78a165b6722954f4180f15c07
sha512: 2df646b3a2e55264cfbab09dac63afd84b64c5eea6a3d2240ee486bfc4d515731a816e69e516b1ec256ac3cc6b57f05614697c49c180012208e3dabeccf90596
ssdeep: 98304:PX4+VZBl1U+ADsKaHZfqtfAYaf8gtN/wb586yppKDYLkEGxsAYusHU:v3vl5BtHoApf86alypBHHAd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion: 4.0.1
CompanyName: winthread software
Comments: This installation was built with Inno Setup.
ProductName: Windows Keylogger
ProductVersion: free
FileDescription: Windows Keylogger Setup
OriginalFileName:
Translation: 0x0000 0x04b0

Application.KeyLogger.QSZ also known as:

MicroWorld-eScanApplication.KeyLogger.QSZ
CAT-QuickHealTrojanspy.Bobik
McAfeeArtemis!58690BC98760
VIPREFreeKeylogger.Net
AegisLabTrojan.Win32.Bobik.l!c
SangforMalware
BitDefenderApplication.KeyLogger.QSZ
ArcabitApplication.KeyLogger.QSZ
CyrenW32/Application.FNBK-0825
ESET-NOD32a variant of MSIL/KeyLogger.BestFreeKeylogger.D
APEXMalicious
KasperskyTrojan-Spy.Win32.Bobik.ckq
AlibabaTrojanSpy:Win32/Bobik.d09be581
Ad-AwareApplication.KeyLogger.QSZ
EmsisoftApplication.KeyLogger.QSZ (B)
McAfee-GW-EditionBehavesLike.Win32.AdwareFileTour.rc
FortinetW32/Bobik.CKQ!tr
FireEyeApplication.KeyLogger.QSZ
SophosGeneric PUA JJ (PUA)
WebrootSystem.Monitor.Windowskeylogger
MAXmalware (ai score=100)
Endgamemalicious (high confidence)
ZoneAlarmTrojan-Spy.Win32.Bobik.ckq
CylanceUnsafe
TencentWin32.Trojan-spy.Bobik.Swbh
YandexTrojanSpy.Bobik!
GDataApplication.KeyLogger.QSZ
MaxSecureTrojan.Malware.1728101.susgen
AVGFileRepMetagen [Malware]
AvastFileRepMetagen [Malware]
Qihoo-360Win32/Trojan.Spy.5b3

How to remove Application.KeyLogger.QSZ?

Application.KeyLogger.QSZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment