Spy Trojan

Trojan-Spy.Win32.KeyLogger.bsdp removal

Malware Removal

The Trojan-Spy.Win32.KeyLogger.bsdp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.KeyLogger.bsdp virus can do?

  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Sniffs keystrokes
  • Network activity detected but not expressed in API logs

How to determine Trojan-Spy.Win32.KeyLogger.bsdp?


File Info:

crc32: 24303E47
md5: a11e268099f812ff17ce294fa1e2c417
name: A11E268099F812FF17CE294FA1E2C417.mlw
sha1: 5c4a62dc6e47a083807b59513474eed7adcf7f98
sha256: 6be5627d551f96bac2be3fde28b679e34c049272377b2aac3b213f5500fccd41
sha512: 09395f5264af3ac19eb2666665306deff19fdd33939f9df9a992e50ec77c1c3cc826d02011a191e66284223fb9bb7e6bb395420fb816727812220949e59c7a70
ssdeep: 24576:4eltL9ilRoCIoxEq1pQka7ixtiE+9ESdt3Mtte7zQ0XPvxjv2Zdsglzdd:4XSiW9EO5k0/vxjuZd7d
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x672cx8f6fx4ef6x53d7x8457x4f5cx6743x6cd5x4fddx62a4xff0cx672ax7ecfx672cx8f6fx4ef6x4f5cx8005@x5c0fx5e78x59d0x7684x8bb8x53efxff0cx60a8x4e0dx5f97x5bf9x672cx8f6fx4ef6x8fdbx884cx975ex6cd5x6ce8x518cx3001x9006x5411x5de5x7a0bx3001x53cdx7f16x8bd1x3001x7834x89e3x4ee5x53cax4efbx4f55x5f62x5f0fx7684x4feex6539xff1bx4e0dx5f97x7981x6b62x906ex6389x3001x79fbx5f00x6216x53bbx9664x672cx8f6fx4ef6x4e4bx7248x6743x6240x6709x3001x6587x5b57x8bf4x660ex4ee5x53cax6240x6709x94fex63a5x3002
FileVersion: 3.3.1.0
CompanyName: @x5c0fx5e78x59d0
Comments: @x5c0fx5e78x59d0x7684x5faex535ahttp://weibo.com/gggggg
ProductName: x4ed9x52514x5c0fx5e78x4feex6539x5668
ProductVersion: 3.3.1.0
FileDescription: Pal4 Trainer
Translation: 0x0804 0x04b0

Trojan-Spy.Win32.KeyLogger.bsdp also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005246d51 )
Elasticmalicious (high confidence)
ALYacTrojan.GenericKD.43342309
CylanceUnsafe
BitDefenderTrojan.GenericKD.43342309
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.099f81
CyrenW32/Agent.EW.gen!Eldorado
ESET-NOD32a variant of Win32/FlyStudio.HackTool.A potentially unwanted
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.KeyLogger.bsdp
AlibabaTrojanSpy:Win32/KeyLogger.f231dcaa
NANO-AntivirusTrojan.Win32.KeyLogger.ibbahs
MicroWorld-eScanTrojan.GenericKD.43342309
TencentWin32.Trojan-spy.Keylogger.Ligk
Ad-AwareTrojan.GenericKD.43342309
SophosMal/Generic-S
ComodoWorm.Win32.Dropper.RA@1qraug
BitDefenderThetaGen:NN.ZexaF.34266.Kr0@a8XmwAkb
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R06CC0WGV21
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.a11e268099f812ff
EmsisoftTrojan.GenericKD.43342309 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.KeyLogger.nqx
WebrootW32.Malware.Gen
Antiy-AVLTrojan/Win32.FlyStudio.a
ArcabitTrojan.Generic.D29559E5
GDataWin32.Trojan.PSE.19Q2126
Acronissuspicious
McAfeeArtemis!A11E268099F8
MAXmalware (ai score=86)
VBA32BScope.Downloader.Snojan
MalwarebytesTrojan.MalPack.FlyStudio
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R06CC0WGV21
MaxSecureTrojan.Malware.109431601.susgen
FortinetRiskware/KeyLogger
Paloaltogeneric.ml

How to remove Trojan-Spy.Win32.KeyLogger.bsdp?

Trojan-Spy.Win32.KeyLogger.bsdp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment