PUA

PUADlManager:Win32/LTLogger removal guide

Malware Removal

The PUADlManager:Win32/LTLogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUADlManager:Win32/LTLogger virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine PUADlManager:Win32/LTLogger?


File Info:

name: ECB52E509CBD4E042C1D.mlw
path: /opt/CAPEv2/storage/binaries/6b74348d67230dc843f2a471f6b43f14c3090940b8bf805cafb12358040727d2
crc32: F50B7D8C
md5: ecb52e509cbd4e042c1ddccbc9460909
sha1: 8b9b6586fa16e4967a5b703090370ed48c320de9
sha256: 6b74348d67230dc843f2a471f6b43f14c3090940b8bf805cafb12358040727d2
sha512: 56953e0839e8e3299cbb494d1b2898127cc25dae46324d48be20b4536d7817ebb4818d5fa959e27fe0815504be3aee710107a4b936c1a0b36206e40080850db8
ssdeep: 196608:bMtL/Nhzi5q+/6NOxbcNFBcqUE14hllbcIIhgL30rYM9530qB3jdP:bMtLFh0SSbcNH1UE+hl1cK70cM95JjZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1599633F092A0A40CED6277B9FD8D05B5BF138E6D25E1DB225335771F2CB9A02A20BD15
sha3_384: 9103b2a58a49f0ab7cac2fb41d402587b4c0137a6f916805eacd65b647dd1be7cc8b9a7a64646a967d2019ed9766c12c
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-06-06 21:44:26

Version Info:

Comments: $PRODUCT_WEB
CompanyName: 极点五笔
FileDescription: 极点五笔 十周年纪念版安装程序
FileVersion: 7.15.0.0
LegalCopyright: Corporation. All rights reserved.
ProductName: 极点五笔 十周年纪念版
ProductVersion: 7.15.0.0
Translation: 0x0000 0x03a8

PUADlManager:Win32/LTLogger also known as:

LionicTrojan.Win32.Ltlogger.4!c
MicroWorld-eScanApplication.Generic.3469018
FireEyeApplication.Generic.3469018
McAfeeArtemis!ECB52E509CBD
Cylanceunsafe
K7AntiVirusRiskware ( 004c6a3e1 )
AlibabaRiskWare:Win32/LTLogger.95a0cb72
K7GWRiskware ( 004c6a3e1 )
Cybereasonmalicious.09cbd4
ESET-NOD32a variant of Win32/RiskWare.LTLogger.A
APEXMalicious
ClamAVWin.Trojan.Ramnit-7643
BitDefenderApplication.Generic.3469018
AvastFileRepMalware [Misc]
SophosGeneric Reputation PUA (PUA)
DrWebTrojan.Siggen17.49140
VIPREApplication.Generic.3469018
TrendMicroADW_ADLOAD
EmsisoftApplication.Generic.3469018 (B)
IkarusPUA.RiskWare.Ltlogger
GDataApplication.Generic.3469018
WebrootW32.Trojan.Startpage.Aaw@aaaaa
GoogleDetected
XcitiumMalware@#14ac43g406f9a
ArcabitApplication.Generic.D34EEDA
MicrosoftPUADlManager:Win32/LTLogger
AhnLab-V3Trojan/BAT.Autorun.SC180455
ALYacApplication.Generic.3469018
MAXmalware (ai score=98)
VBA32Trojan.Virtumod
MalwarebytesMalware.AI.1579210920
TrendMicro-HouseCallADW_ADLOAD
RisingPUA.LTLogger!8.F66A (RDMK:cmRtazoyCzacftWM8UKQ53KXQyg8)
MaxSecureTrojan.Malware.74234224.susgen
FortinetAdware/LTLogger
AVGFileRepMalware [Misc]
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_90% (W)

How to remove PUADlManager:Win32/LTLogger?

PUADlManager:Win32/LTLogger removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment