WinGo/Spy.KeyLogger.AT information

The WinGo/Spy.KeyLogger.AT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What WinGo/Spy.KeyLogger.AT virus can do?

• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine WinGo/Spy.KeyLogger.AT?

File Info:
name: BAB6659F728DFADC02A3.mlw
path: /opt/CAPEv2/storage/binaries/6bab85940ef0860fba189ee90faa0054b4b9e57cdb369a52ace0d8b8cd47481e
crc32: 5573260F
md5: bab6659f728dfadc02a33743953f28c7
sha1: 84aeda19959755e537492a1348ad058ad487cfb7
sha256: 6bab85940ef0860fba189ee90faa0054b4b9e57cdb369a52ace0d8b8cd47481e
sha512: 3ae588afda127d44606c9cf8ba6ddca3eede9b74fba906b80e86ca6b62bbb57f697525d66f83520c53b43f15019d4ad77805c6a73c6d4435ec15932022817c42
ssdeep: 49152:F1zp5TFcI2IG+5BvPSlOWpSUoUGzhIQYIp4VZSPq5F6e+LR8ijFcBx/vktJUE1ER:TrhtG+5dPS7pV3NKUwQ0GR
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T180362941FACB44F6DA07193050A7623F67346D068B29DBDBEB107B2EE9336951E32349
sha3_384: e728ba67e6ceb6c30d7ade89eb83db31c1ff088811fa3f425371dbd948c80645cc8eb1ef33db87dfcf09feb20d249c41
ep_bytes: e90bddffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

WinGo/Spy.KeyLogger.AT also known as:

How to remove WinGo/Spy.KeyLogger.AT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.