Win32/Spy.KeyLogger.NDW removal guide

The Win32/Spy.KeyLogger.NDW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Spy.KeyLogger.NDW virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it

How to determine Win32/Spy.KeyLogger.NDW?


File Info:
crc32: 9EAD39BF
md5: 08513ede9f78703d7929e85a3f48bb6f
name: 08513EDE9F78703D7929E85A3F48BB6F.mlw
sha1: 11294a76d4ea83fa6786e503b21261d542f18e43
sha256: 1dc389a167315f0a1ef7515fd9ae64b0e948567540b7e9c4f206884f43c1797a
sha512: 260504c7e8869566ad3875500e92251dfb9a06e6441468a6ab21ad0dd8c593d16aff4593a2c4324809b372a1457f02b15dd5fac38ab8b50b45413d38ab7db273
ssdeep: 24576:v2Ux6UMuR72q8iEl8zV0/k7sVMGb8YaXag:v2WLB/28ZOk7sd7aV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Basilisco Coder                                             
Comments: This installation was built with Inno Setup.
ProductName: Basilisco Ultilities                                        
ProductVersion:                     
FileDescription: Basilisco Ultilities Setup                                  
Translation: 0x0000 0x04b0

Win32/Spy.KeyLogger.NDW also known as:

Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.PWS.Banker.22953
ALYac	Gen:Trojan.Backdoor2.AG0@au9GsLcG
Cylance	Unsafe
Alibaba	Backdoor:Win32/KeyLogger.d283fe40
Cybereason	malicious.e9f787
Cyren	W32/Trojan.OMDZ-7243
Symantec	Adware.ADH
ESET-NOD32	a variant of Win32/Spy.KeyLogger.NDW
Avast	Win32:Trojan-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Trojan.Keylogger.KG0@a8M3mreG
NANO-Antivirus	Trojan.Win32.Delf.yivi
MicroWorld-eScan	Gen:Trojan.Keylogger.KG0@a8M3mreG
Tencent	Win32.Trojan.Generic.Eyb
Sophos	Mal/Behav-416
Comodo	Suspicious@#1clii97nzf3qk
BitDefenderTheta	Gen:NN.ZelphiF.34266.KG0@a8M3mreG
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_DELF.IMF
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Trojan.Keylogger.KG0@a8M3mreG
Emsisoft	Gen:Trojan.Keylogger.KG0@a8M3mreG (B)
Avira	TR/Symmi.723456
Antiy-AVL	Trojan/Generic.ASMalwS.13DD4E3
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Occamy.C1D
GData	Gen:Trojan.Backdoor2.AG0@au9GsLcG
McAfee	Artemis!08513EDE9F78
MAX	malware (ai score=100)
VBA32	TrojanSpy.Delf
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_DELF.IMF
Rising	Trojan.Generic@ML.91 (RDML:MK4laDhEGVGVrAOFpVvBEQ)
Yandex	Trojan.GenAsa!xwHoHBKx9Ok
Ikarus	Hoax.Win32.GSMgen
Fortinet	W32/Generic.NDW!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Win32/Spy.KeyLogger.NDW?

Win32/Spy.KeyLogger.NDW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X