Categories: Spy

Should I remove “Win32/Spy.KeyLogger.NLS”?

The Win32/Spy.KeyLogger.NLS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.KeyLogger.NLS virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.KeyLogger.NLS?


File Info:
crc32: 0C86893Amd5: a134226882fd5349b513b3876c0e3bbdname: A134226882FD5349B513B3876C0E3BBD.mlwsha1: ed54769351a6e8bce5166e75d36e3ca21425e718sha256: 09bcf8adcab26db1544e9881cf0f0858fe216c1c80d8f98fc3de25478c36775asha512: 5bdda31069afe747566304f5dac6153059e691b7695364802501170e1ace770784602fc1b5815205870f843d0b8dc2e788060e9b754c726d5f21eaba9eeb6774ssdeep: 384:BVOX6H1jxakVWbiggB7GbhyLrUE5OPifOX6H1LhV:2X69xRVI+GMLJ5OlX6DVtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0LegalCopyright: Copyright@ 2009-2010InternalName: stubFileVersion: 6.02.0008CompanyName: Ati Tecknologie'sProductName: AtiCnfProductVersion: 6.02.0008FileDescription: Screen UtilityOriginalFilename: stub.dll

Win32/Spy.KeyLogger.NLS also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Spyware ( 00159cef1 )
Lionic	Trojan.Win32.Foreign.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop3.24757
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.ForeiMF.S10974049
ALYac	Gen:Variant.Razy.56598
Cylance	Unsafe
Sangfor	Ransom.Win32.Foreign.8
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Ransom:Win32/Foreign.d87e4d37
K7GW	Spyware ( 00159cef1 )
Cybereason	malicious.882fd5
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.KeyLogger.NLS
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Agent-1848753
Kaspersky	Trojan-Ransom.Win32.Foreign.nbjp
BitDefender	Gen:Variant.Razy.56598
NANO-Antivirus	Trojan.Win32.Drop.ecbwch
MicroWorld-eScan	Gen:Variant.Razy.56598
Tencent	Malware.Win32.Gencirc.114bfd0f
Ad-Aware	Gen:Variant.Razy.56598
Sophos	ML/PE-A + Mal/VB-NU
Comodo	Malware@#3mfajwr2mwy8c
BitDefenderTheta	AI:Packer.AD3559841F
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	GenericR-HKB!A134226882FD
FireEye	Generic.mg.a134226882fd5349
Emsisoft	Gen:Variant.Razy.56598 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/VB.cqab
Webroot	Trojan.Gen
Avira	HEUR/AGEN.1125775
Antiy-AVL	Trojan/Generic.ASMalwS.1860DE7
Microsoft	TrojanSpy:Win32/Skeeyah.A!rfn
Arcabit	Trojan.Razy.DDD16
GData	Gen:Variant.Razy.56598
AhnLab-V3	Trojan/Win32.VB.R8627
McAfee	GenericR-HKB!A134226882FD
MAX	malware (ai score=99)
VBA32	Malware-Cryptor.VB.gen.1
Panda	Trj/CI.A
Yandex	Trojan.Foreign!Qs8vRPUc9Zg
Ikarus	Trojan-Spy.Agent
Fortinet	W32/Generic.AC.817!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Foreign.HgIASOcA