Should I remove “Win32/KeyLogger.AllInOneKeylogger.N”?

The Win32/KeyLogger.AllInOneKeylogger.N is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/KeyLogger.AllInOneKeylogger.N virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32/KeyLogger.AllInOneKeylogger.N?

File Info:
name: B23CD29E870FDEFD6991.mlw
path: /opt/CAPEv2/storage/binaries/60e5bb7307c23b272321583589576cbe6d342afaf1282e50a0845619757a1475
crc32: 644307D4
md5: b23cd29e870fdefd69914dca99bf65a9
sha1: 3c9dc59cca44f7ef44cf55fcee5bc5ba3cb08358
sha256: 60e5bb7307c23b272321583589576cbe6d342afaf1282e50a0845619757a1475
sha512: f4e8f993a4ac9015244f53356af2b3d5f3673917df82352207aec1d0e4456f51efd26099055927c3a72188e48506e921e12912ca9cd330b18b97e334afd0cf22
ssdeep: 98304:MG2KWmnv+3lE0ZJBff3tD27ZTnnJgdcZUkbQZtM2m4Bt51b:XS1zBXdC7NH2HZtMf4BtPb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E826332AD8928734D8A26B3C0C10F984DA73379B6678EC75419D541FEB1BA670C3E7E1
sha3_384: 3c256440881689d01505a6432a198f1badc38f6757ac3053e806e858baf3c77a567ecbc5a6f56ca14676a4002d55989d
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Tec                                                         
FileDescription: 1 Key Log Setup                                             
FileVersion: 4.2                 
LegalCopyright: Copyright © 2004 - 2017. All rights Reserved                                                        
ProductName: 1 Key Log                                                   
ProductVersion: 4.2                                               
Translation: 0x0000 0x04b0

Win32/KeyLogger.AllInOneKeylogger.N also known as:

How to remove Win32/KeyLogger.AllInOneKeylogger.N?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.