Categories: SpyTrojan

Should I remove “UDS:Trojan-Spy.MSIL.KeyLogger.sb”?

The UDS:Trojan-Spy.MSIL.KeyLogger.sb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan-Spy.MSIL.KeyLogger.sb virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Uses Windows utilities for basic functionality
Sniffs keystrokes
Checks for the presence of known windows from debuggers and forensic tools
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

tankionline.com

a.tomx.xyz

relax.no-ip.info

How to determine UDS:Trojan-Spy.MSIL.KeyLogger.sb?


File Info:
crc32: 027C78F4md5: d0a3e022238da36781ff1d59180bb62dname: D0A3E022238DA36781FF1D59180BB62D.mlwsha1: 0796cf4dd0c305d991184c7b456b9219fe6fca99sha256: be11b8a494a0d8f07ec0889113401abf1921ea089f3049015a06d9be6de4434esha512: 4e26eed51f4a84d48f901536c466224fe6d8e2bcb84be6123231d7c7fcef4a556b94f13b7771b4499076d726d59d23517b0e97dd1eb06bf3858b3f73e83de47fssdeep: 24576:dJIP5U9TOVmY+mK2B2MFZ0NZNMWm2i/v3xZAVg5/NuLWUs00Pa1kNqMcjs:/IBgqI2BXFZiZNRm2i/I0Nou0aqM5type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

UDS:Trojan-Spy.MSIL.KeyLogger.sb also known as:

Lionic	Trojan.Win32.Generic.4!c
ALYac	Trojan.GenericKD.2141410
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 004bd6f41 )
K7AntiVirus	Trojan ( 004bd6f41 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Bladabindi.Q
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	UDS:Trojan-Spy.MSIL.KeyLogger.sb
BitDefender	Trojan.GenericKD.2141410
NANO-Antivirus	Trojan.Win32.Bladabindi.dnmuui
MicroWorld-eScan	Trojan.GenericKD.2141410
Tencent	Win32.Trojan.Spy.Wqcp
Ad-Aware	Trojan.GenericKD.2141410
F-Secure	Heuristic.HEUR/AGEN.1112157
BitDefenderTheta	Gen:NN.ZexaF.34170.WqW@aqkg0rk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tc
FireEye	Generic.mg.d0a3e022238da367
Emsisoft	Trojan.GenericKD.2141410 (B)
Avira	HEUR/AGEN.1112157
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D20ACE2
GData	Trojan.GenericKD.2141410
McAfee	Artemis!D0A3E022238D
MAX	malware (ai score=100)
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.93 (RDML:Wru1tHq2qwUitg/is1rZuQ)
Yandex	Trojan.Agent!OFML8TzbfZ4
Ikarus	Backdoor.MSIL.Bladabindi
Fortinet	W32/Generic.Q!tr
AVG	Win32:Malware-gen