Trojan

Trojan-Dropper.Win32.Daws.azuo removal guide

Malware Removal

The Trojan-Dropper.Win32.Daws.azuo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Daws.azuo virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempted to write directly to a physical drive
  • Deletes executed files from disk
  • Touches a file containing cookies, possibly for information gathering
  • Collects information to fingerprint the system
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan-Dropper.Win32.Daws.azuo?


File Info:

name: 9DAD48280901BB579832.mlw
path: /opt/CAPEv2/storage/binaries/d314e971d6856cac52a0254b05d1b960b1ed3ebd4978863cb7600a02afcaa5a9
crc32: BAB7795C
md5: 9dad48280901bb579832a5e9530277ce
sha1: 083d7f20945c090168818c6b073cf133de5a17f2
sha256: d314e971d6856cac52a0254b05d1b960b1ed3ebd4978863cb7600a02afcaa5a9
sha512: a107e2748271d1e12045a0decccabe8a8eacd586740b40c5187ef131b28f41219f04ddceef9e4bb494c08d336a6a2146baa4f0f9b1b56ad2100ce01cbcdf8694
ssdeep: 24576:HQ/Z9arRbSnCS/ZmExYaEsAGSTU9twGTdK8kUu1hLMVK:kCFbSCSIEiLsA+92udK8bKAK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F825239B3C24E296D12557309D25AF6F1A40FCA4BC7A450FF1D07A2EDB3B682312753A
sha3_384: b7832cace25bd6ea8c9911413fbde2cb4255c9dd48684e208bd3fc259cb9c29cec67a5bc7daa4b5137f527617caf7454
ep_bytes: 558bec83ec4456ff15a44040008bf08a
timestamp: 2010-07-07 09:14:45

Version Info:

CompanyName: LogMeIn, Inc.
FileDescription: LogMeIn Rescue
FileVersion: 6.2.373
InternalName: Rescue
LegalCopyright: Copyright © 2005-2010 LogMeIn, Inc. US patents pending.
OriginalFilename: LMIRescue.exe
ProductName: LogMeIn Rescue
ProductVersion: 6.2.373
Translation: 0x0409 0x04b0

Trojan-Dropper.Win32.Daws.azuo also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Daws.totq
DrWebTrojan.DownLoader5.1560
MicroWorld-eScanTrojan.GenericKD.68605344
FireEyeTrojan.GenericKD.68605344
ALYacTrojan.GenericKD.68605344
ZillyaDropper.Daws.Win32.3511
SangforDropper.Win32.Daws.V20g
CrowdStrikewin/malicious_confidence_70% (W)
KasperskyTrojan-Dropper.Win32.Daws.azuo
BitDefenderTrojan.GenericKD.68605344
NANO-AntivirusTrojan.Win32.Daws.bbxgoa
TencentWin32.Trojan-Dropper.Daws.Timw
EmsisoftTrojan.GenericKD.68605344 (B)
VIPRETrojan.GenericKD.68605344
McAfee-GW-EditionArtemis!Trojan
Trapminesuspicious.low.ml.score
GDataTrojan.GenericKD.68605344
JiangminTrojanDropper.Daws.ceg
MAXmalware (ai score=83)
XcitiumTrojWare.Win32.TrojanDropper.Daws.AWVZ@7pjjd8
ArcabitTrojan.Generic.D416D5A0
ZoneAlarmTrojan-Dropper.Win32.Daws.azuo
McAfeeArtemis!9DAD48280901
VBA32TrojanDropper.Daws
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.R002H07HA23
RisingTrojan.Generic@AI.100 (RDML:+gZzmF2AzEHHMqk6ynscaQ)
MaxSecureTrojan.Malware.4932956.susgen
FortinetW32/Daws.AZUO!tr
Cybereasonmalicious.0945c0

How to remove Trojan-Dropper.Win32.Daws.azuo?

Trojan-Dropper.Win32.Daws.azuo removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment