About “RiskWare.KeyLogger” infection

The RiskWare.KeyLogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskWare.KeyLogger virus can do?

• Creates RWX memory
• Drops a binary and executes it
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial language used in binary resources: Russian
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Creates a copy of itself

Related domains:

How to determine RiskWare.KeyLogger?

File Info:
crc32: 6030F936
md5: a8353c42ba8e71f339bf7a3d5526c9cd
name: install_en.exe
sha1: d14096668597e9352bc8d07724f70752357ed822
sha256: 0983b749200a8d99f90c3608109358f2ed6346f1a224341b09de701f50391088
sha512: 19df9873c25604c6d8920cca040443d1a0a5f705959d19e1c20346d268c2adaabd0f9d3d96399d8461f6a37b4f4f49a17da0c41fcc420efc5dfcc409539d3602
ssdeep: 49152:j9cISnJr1HZk/uo1aBfPNmPOXvtcS0TrTou6:pqZkWo1aBXcS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 2.2.0.0
CompanyName: MCsoft
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 2.2
FileDescription: Install
OriginalFilename: 
Translation: 0x0409 0x04e4

RiskWare.KeyLogger also known as:

How to remove RiskWare.KeyLogger?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.