Should I remove “Trojan-Spy.MSIL.Keylogger.cpal”?

The Trojan-Spy.MSIL.Keylogger.cpal is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.MSIL.Keylogger.cpal virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Presents an Authenticode digital signature
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Trojan-Spy.MSIL.Keylogger.cpal?

File Info:
name: D4985C33CCE75AD38DC4.mlw
path: /opt/CAPEv2/storage/binaries/ddce96eceb7bab14dc941c21f5160f2a4d5f5332f92072dba24b2f1eaa2e37af
crc32: 48ECF99E
md5: d4985c33cce75ad38dc4504702329a38
sha1: 9b2ab9db445755310fac2f0cbfb3a97ac577471e
sha256: ddce96eceb7bab14dc941c21f5160f2a4d5f5332f92072dba24b2f1eaa2e37af
sha512: cca9719aeef9e1b0482bf3b25c58d5ecf79482cc21c45f6b533926a81f7a963a22dfaa3529bfa8b55f5b546590468080a436ac0ca4210db2cb7196e6c6f0bb8b
ssdeep: 196608:6ikg0gS+U7ehi+Dp7Rup7DCKv2SLsVbrgnJK8Vg8slQXE3:HtPw7d+DB87DCOLsVnEv+j3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E38633A1F7C781B1F2659A78826589451E1A3FD480E212AB7C3DCC0D08396DE8EF7F95
sha3_384: 68668248346b8906d76760f818c43f6098529e02ef6dbdb590c89a0b76f9ce8457437169023eb1b2ce0a56f05ec39900
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2015-07-16 13:24:20

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: DOPLE Inc.                                                  
FileDescription: VXCharts Setup                                              
FileVersion: 1.0.7892.0          
LegalCopyright: Copyright © DOPLE Inc. 2007-2014                                                                    
ProductName: VXCharts                                                    
ProductVersion: 1.0.7892.0                                        
Translation: 0x0000 0x04b0

Trojan-Spy.MSIL.Keylogger.cpal also known as:

How to remove Trojan-Spy.MSIL.Keylogger.cpal?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.