Categories: Malware

Should I remove “MonitoringTool:Win32/AdvancedKeylogger”?

The MonitoringTool:Win32/AdvancedKeylogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MonitoringTool:Win32/AdvancedKeylogger virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Checks for the presence of known windows from debuggers and forensic tools
Checks the version of Bios, possibly for anti-virtualization
Detected Armadillo packer using a known mutex
Detected Armadillo packer using a known registry key
Collects information to fingerprint the system

How to determine MonitoringTool:Win32/AdvancedKeylogger?


File Info:
name: 34495413B5DD6297E6A8.mlwpath: /opt/CAPEv2/storage/binaries/22a29e4cb20d82c10db6c6028396b261688edd4e959ff55ada1121a4d0a7b41fcrc32: 2650D658md5: 34495413b5dd6297e6a8d766a708c2ddsha1: dcf346bc14f3cde239fef2a65a1477425fea7097sha256: 22a29e4cb20d82c10db6c6028396b261688edd4e959ff55ada1121a4d0a7b41fsha512: 1af3b76b933a55f408dd82e04434d5ee0b8e710d59d2b040701d902457114df9f72948a4aae888266a398406df9c2e7285ca9843b22bc2fb4f7be6eba1d79357ssdeep: 24576:dV6yLEYfXi31krDtY1ZdDfrIqrDXq6KBavyfz+CzygsMs2x:dV6yLEIikrxY/dDDIqfXq6K8PCm4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CA45236A92D1FD5EE11BEA7080EEED70F370EC6DAB05022D77403E1FB931145A512AE9sha3_384: ec94772a7815bc241041c4b99c66e3006fe4ebb510e669d9a53e13877990dbfb90e65a9083beaacebe4cb1a7313e79a3ep_bytes: 83ec0c53555657c74424107092400033timestamp: 2004-02-07 17:26:11
Version Info:
0: [No Data]

MonitoringTool:Win32/AdvancedKeylogger also known as:

Bkav	W32.Common.C4745E74
Lionic	Trojan.Win32.AdvancedKeyLogger.l!c
Elastic	malicious (high confidence)
DrWeb	Trojan.KeyLogger.4782
MicroWorld-eScan	Application.AdvancedKeyLogger.A
FireEye	Application.AdvancedKeyLogger.A
Skyhigh	BehavesLike.Win32.Dropper.tc
McAfee	Artemis!34495413B5DD
Malwarebytes	Malware.AI.4277997671
VIPRE	Application.AdvancedKeyLogger.A
Sangfor	Spyware.Win32.Advancedkeylogger.Vaov
K7AntiVirus	Unwanted-Program ( 004d38111 )
Alibaba	TrojanSpy:Win32/AdvancedKeylogger.5f9770e9
K7GW	Unwanted-Program ( 004d38111 )
Cybereason	malicious.3b5dd6
BitDefenderTheta	Gen:NN.ZexaF.36802.80X@aWQ5vohc
Symantec	Spyware.AdvancedKey
ESET-NOD32	multiple detections
TrendMicro-HouseCall	Spyware_KEYL_AdvancedKeylogger
Avast	Win32:KeyLogger-GD [Trj]
Kaspersky	Trojan-Spy.Win32.AdvancedKeyLogger.17
BitDefender	Application.AdvancedKeyLogger.A
NANO-Antivirus	Trojan.Win32.AdvancedKeyLogger.cyob
Tencent	Win32.Trojan-Spy.Advancedkeylogger.Etgl
Sophos	Mal/Behav-417
F-Secure	Trojan.TR/ATRAPS.Gen
TrendMicro	Spyware_KEYL_AdvancedKeylogger
Emsisoft	Application.AdvancedKeyLogger.A (B)
Ikarus	Trojan-Dropper.Agent
MAX	malware (ai score=100)
Jiangmin	TrojanSpy.AdvancedKeyLogger.c
Webroot	Hack.Tool.Advanced.Keylogger
Google	Detected
Avira	TR/ATRAPS.Gen
Varist	W32/Trojan.VNAG-7084
Antiy-AVL	Trojan[Spy]/Win32.AdvancedKeyLogger
Kingsoft	Win32.Troj.Undef.a
Microsoft	MonitoringTool:Win32/AdvancedKeylogger
Xcitium	Malware@#2g5o1l0td0u2y
Arcabit	Application.AdvancedKeyLogger.A [many]
ViRobot	Dropper.S.Agent.1180431
ZoneAlarm	Trojan-Spy.Win32.AdvancedKeyLogger.17
GData	Trojan.Generic.8767646
AhnLab-V3	Win-AppCare/Keylogger.987136
VBA32	TrojanSpy.AdvancedKeyLogger
ALYac	Application.AdvancedKeyLogger.A
TACHYON	Trojan-Spy/W32.AdvancedKeyLogger.1180431
Cylance	unsafe
Panda	Generic Malware
Rising	Trojan.Spy.AdvancedKeyLogger.17.a (CLASSIC)
Yandex	TrojanSpy.AdvancedKeyLog!F6JUUDErSnI
Fortinet	W32/Malware_fam.NB
AVG	Win32:KeyLogger-GD [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan[spy]:Win/AdvancedKeyLogger