What is “Python/Spy.KeyLogger.LR”?

The Python/Spy.KeyLogger.LR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Python/Spy.KeyLogger.LR virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Anomalous file deletion behavior detected (10+)
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Created a process from a suspicious location
• CAPE detected the PyInstaller malware family

How to determine Python/Spy.KeyLogger.LR?

File Info:
name: 890D2855BD2CDE3262D5.mlw
path: /opt/CAPEv2/storage/binaries/9519ffff257f9b1b2966da54ec726f3223841247c394f9afcfd673ff910a3a80
crc32: 0E635CAC
md5: 890d2855bd2cde3262d59e3b4684ff95
sha1: a1fe31059447a1ee87f59b5b059682ad4c2436da
sha256: 9519ffff257f9b1b2966da54ec726f3223841247c394f9afcfd673ff910a3a80
sha512: fdef05680b43a1e1f5f18559d76798201ea6d7e4ee6dfc2f8ab8738002006a36805b6ebf27126f7c892f0661d6b8d48cdf160a20a608b2c83ae90d554da359e3
ssdeep: 196608:OINMPC5SCsXDjDyf6L2WliXYrHW1/7EEOkPXNeXbBXP:hMP1CEDVL2ciIrHWJfzPdeLN
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T19C8633E666B039F6F8622136AC10D43DDAF3782ACF41C46F8A89A05B1D637D17477E81
sha3_384: 0affa6f697d0aec8cf728d070a993dfb3c0a2fb576695f41865fdef1acf1831246c9ff90c4cef67ea04beb639f116d46
ep_bytes: 4883ec28e8f70400004883c428e97afe
timestamp: 2021-11-09 18:04:01

Version Info:
0: [No Data]

Python/Spy.KeyLogger.LR also known as:

How to remove Python/Spy.KeyLogger.LR?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.