What is “Spyware.Perflogger”?

The Spyware.Perflogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.Perflogger virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial language used in binary resources: Russian
• Authenticode signature is invalid
• Checks for the presence of known windows from debuggers and forensic tools
• CAPE detected the shellcode get eip malware family
• Detects the presence of Wine emulator via registry key
• Attempts to create or modify a Browser Helper Object
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Spyware.Perflogger?

File Info:
name: 5A13D2281AF45E10647E.mlw
path: /opt/CAPEv2/storage/binaries/c6cc6c3205f9814dba47b23a53fe82cbe9f91363f3940546e8e4e916e9d292cd
crc32: BB191C8B
md5: 5a13d2281af45e10647e81f7d166eb16
sha1: a5281835c1a8e91df6421ccb572383f7c1f7c1ff
sha256: c6cc6c3205f9814dba47b23a53fe82cbe9f91363f3940546e8e4e916e9d292cd
sha512: 63c578adbf609cdadfeb417fedf6db909a211360ebd930c109fc9d45d4a05aadf413dd340b8e60dd0224e0b3c29277773247018e292e997a0a273928cd3b95fc
ssdeep: 49152:tWNxy+lLNIesEFCXYC3E2uPLCGGB16P+Dh++Ce71xYWMMhPXYbJ:GY+lyfjKPLcvDh3CijM8PXg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T122C53320F2D347B2D1821A71361E8FBB451D7FA167A348E377D47A2D98B2885B9403ED
sha3_384: 10b0ff403b36a1ce951a9c8e245324682e163f03ef43b0e7024c12385c7a8bca3d875b0c39c7fdd288c277c1d9f54e53
ep_bytes: e997120000000000009090906a006869
timestamp: 2002-05-14 12:21:48

Version Info:
0: [No Data]

Spyware.Perflogger also known as:

How to remove Spyware.Perflogger?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.