Trojan:MSIL/Lazy.PTGE!MTB removal guide

The Trojan:MSIL/Lazy.PTGE!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Lazy.PTGE!MTB virus can do?

Authenticode signature is invalid

How to determine Trojan:MSIL/Lazy.PTGE!MTB?


File Info:
name: 523AEBEE58F494CB1EB0.mlw
path: /opt/CAPEv2/storage/binaries/f4e33f0e6dfc8453ff4e0b696652e13c0a7c23d9718132a8328025d9c04de31d
crc32: 5205A237
md5: 523aebee58f494cb1eb0a6a6ea2d47ef
sha1: df12a336e7b0dc3eda9fc710f0c78789e119a139
sha256: f4e33f0e6dfc8453ff4e0b696652e13c0a7c23d9718132a8328025d9c04de31d
sha512: e111d83f5937040f645f24dcc9bfc73ca521e8a9cad4a8ec79c42ab53c7f8a2fa53ce93013a75a09a937236b804e0af448602070eccf07c7278213f1de17c1c3
ssdeep: 1536:X4KUggozWwVoi/+rj5Qp2ejivb2KNo7be+JweRVCXPHQFCbOQuy0sCEVVVh5xzDE:Xi1ozHZrfWjrkySNrsHjH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D5938D11B64AD126D27F6B3C88A3A514DF3201236351DA0B3D8D91DCAFB7744C2B6B9B
sha3_384: 0f8f59a124c72fc43130a88af2f390792441ad9429c736f8977fd1f32ca26b9a20dfa69ff6518e4e49ef9ceba7575e21
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-17 06:45:01

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Emile Egger & Cie SA
FileDescription: Open Egger Drawing
FileVersion: 1.11
InternalName: openDrawing.exe
LegalCopyright:  
OriginalFilename: openDrawing.exe
ProductVersion: 1.11
Assembly Version: 1.11.0.0

Trojan:MSIL/Lazy.PTGE!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Lazy.4!c
MicroWorld-eScan	Trojan.GenericKD.71251042
FireEye	Trojan.GenericKD.71251042
Skyhigh	RDN/Generic.dx
McAfee	RDN/Generic.dx
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.GenericKD.71251042
Sangfor	Trojan.Win32.Lazy.Ve8i
Arcabit	Trojan.Generic.D43F3462
BitDefenderTheta	Gen:NN.ZemsilF.36680.fm0@a0Ey1nk
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Trojan.GenericKD.71251042
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.71251042 (B)
Ikarus	HackTool.Win32.Malagent
Antiy-AVL	Trojan/MSIL.Lazy
Microsoft	Trojan:MSIL/Lazy.PTGE!MTB
GData	Trojan.GenericKD.71251042
AhnLab-V3	Trojan/Win.Razy.C4923478
ALYac	Trojan.GenericKD.71251042
MAX	malware (ai score=88)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H01AH24
Rising	Trojan.Lazy!8.8EC3 (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan:MSIL/Lazy.PTGE!MTB?

Trojan:MSIL/Lazy.PTGE!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X