Trojan

Should I remove “TrojanDownloader:Win32/Lotok.A!MTB”?

Malware Removal

The TrojanDownloader:Win32/Lotok.A!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanDownloader:Win32/Lotok.A!MTB virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Lotok.A!MTB?



File Info:

name: 0FA833346451CEEF77BB.mlw
path: /opt/CAPEv2/storage/binaries/6475452d0e3ee89df4b838b0c2c5636af1aa34f8008c1b6c4db659b31fea7c7c
crc32: DDB066DB
md5: 0fa833346451ceef77bbc676b55b00a4
sha1: e211cdd5a7239e770153e6f7728383634bd5391d
sha256: 6475452d0e3ee89df4b838b0c2c5636af1aa34f8008c1b6c4db659b31fea7c7c
sha512: aad365b13cb28aab8b18a1d377636ddd1a80f75b959e7aced120476ca658203d1344d27fd3d6fb5b7d56f0c9c99c97ae073fa7e5c9bdc0267ffe8cc5acc84dba
ssdeep: 192:SXUCMajpMiMBfpek/JJDHvkMkm8MD64oynR601+bJy35WFW1:9ySfpVJ4Dm8MD64j6xb4JWFW1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T101224B036D0545B3C43ACDF013A78D5C6AB797A14BA071F721B6FA5E0FE17626D2A90C
sha3_384: 8109e7111a68d67bd6904e58e72cb46d8ed2bc62344161382d082355bedac0e1e9fe056c015e19221ff2b99811b1a920
ep_bytes: 558bec6aff682821400068fa1b400064
timestamp: 2022-07-06 03:28:20


Version Info:

0: [No Data]

TrojanDownloader:Win32/Lotok.A!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zenpak.4!c
Elasticmalicious (high confidence)
FireEyeGeneric.mg.0fa833346451ceef
CAT-QuickHealTrojan.Zenpak
SkyhighGenericRXVM-XR!0FA833346451
McAfeeGenericRXVM-XR!0FA833346451
MalwarebytesMalware.AI.1420092111
SangforTrojan.Win32.Korplug.Vwnj
AlibabaTrojanDownloader:Win32/Lotok.d893ba04
K7GWTrojan ( 005965551 )
BitDefenderThetaGen:NN.ZexaF.36802.amX@aeEb!ke
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Korplug.UC
CynetMalicious (score: 99)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Zenpak.gen
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.11be27af
F-SecureTrojan.TR/Korplug.skjgi
DrWebTrojan.MulDrop20.64844
SophosMal/Generic-S
IkarusTrojan.Win32.Korplug
JiangminTrojan.Zenpak.lpl
AviraTR/Korplug.skjgi
Antiy-AVLTrojan/Win32.Zenpak
Kingsoftmalware.kb.a.996
MicrosoftTrojanDownloader:Win32/Lotok.A!MTB
ZoneAlarmHEUR:Trojan.Win32.Zenpak.gen
GDataWin32.Trojan.Agent.MJYB34
GoogleDetected
AhnLab-V3Trojan/Win.RealProtect-LS.C5240410
VBA32suspected of Trojan.Downloader.gen
Cylanceunsafe
PandaTrj/GdSda.A
RisingTrojan.Zenpak!8.10372 (TFE:5:FHwgAQl5fMV)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Korplug.UC!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudTrojan:Win/Korplug.UC

How to remove TrojanDownloader:Win32/Lotok.A!MTB?

TrojanDownloader:Win32/Lotok.A!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment