About “Win32/Spy.KeyLogger.PFI” infection

The Win32/Spy.KeyLogger.PFI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Spy.KeyLogger.PFI virus can do?

How to determine Win32/Spy.KeyLogger.PFI?


File Info:
crc32: 02B57DB0
md5: 2968137d6cacdde1a3b4b59a3c1e5e17
name: 2968137D6CACDDE1A3B4B59A3C1E5E17.mlw
sha1: 7ae986680183a92a985a4aee201dd43663965275
sha256: aae3f07ed7e74ac932f85de3bdab910f4d94c5a806103336a4c964ad1f5ea021
sha512: d040a13d2a534cb2461795eb182d63679366cf25ee2ef973c776edc2925dff585e9c754c3178e74e05ecbf512250d3962c8abbe0a66ddaa538020279854d8ec0
ssdeep: 1536:1szliSsMLb784Kg+IAqDGuCnkSLhgyK3i:1szUSxv84KgoqDlCnkSLhgH
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Spy.KeyLogger.PFI also known as:

K7AntiVirus	Spyware ( 004fbbd01 )
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.46490296
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanSpy:Win32/KeyLogger.3fd142e2
K7GW	Spyware ( 004fbbd01 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.KeyLogger.PFI
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.46490296
MicroWorld-eScan	Trojan.GenericKD.46490296
Ad-Aware	Trojan.GenericKD.46490296
Sophos	Generic Reputation PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ct
FireEye	Trojan.GenericKD.46490296
Emsisoft	Trojan.GenericKD.46490296 (B)
Avira	HEUR/AGEN.1127772
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D2C562B8
GData	Trojan.GenericKD.46490296
McAfee	Artemis!2968137D6CAC
MAX	malware (ai score=83)
TrendMicro-HouseCall	TROJ_GEN.R002H0AFE21
Rising	Trojan.Generic@ML.97 (RDMK:xb6KqmiehUiVB8L/eJCGaA)
Yandex	TrojanSpy.KeyLogger!6mRqRqRUZPo
Ikarus	Trojan.Win32
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/KeyLogger.PFI!tr.spy
AVG	Win32:Trojan-gen

How to remove Win32/Spy.KeyLogger.PFI?

Win32/Spy.KeyLogger.PFI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X