Categories: SpyTrojan

TrojanSpy:Win32/Keylogger.AZ!MTB removal instruction

The TrojanSpy:Win32/Keylogger.AZ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Keylogger.AZ!MTB virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering

How to determine TrojanSpy:Win32/Keylogger.AZ!MTB?


File Info:
name: 9C271E87A34AD605C8D0.mlwpath: /opt/CAPEv2/storage/binaries/ef03564389c1df12af2595d8da8ca2f35e432cd45823f552f07c01a21d2fb6e0crc32: 7FE6B539md5: 9c271e87a34ad605c8d01033ffbfe45dsha1: c538d5e6a5d055dce8d3fafb9bd83a810e99e94fsha256: ef03564389c1df12af2595d8da8ca2f35e432cd45823f552f07c01a21d2fb6e0sha512: 45a25fa4ddd1a14bf5301bb3e2dce9d4aabd8e38bb42824ce6b26433578544d7f57676915823752809bdadd0a6b6b89647d6243dd388b1c304471de4194ff99dssdeep: 24576:9Tt1a2uxXAOxUi4kRtFv+xai3Cg1BuShasapy8GetCGECYgfMTQBCVunCzh:VfaDC1EShnqgA2TQBCVunCtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T117A54B23B284613EC46B1E3E15679A6CBC3F6B61E5968CD74BF0194CCF351812A3E64Bsha3_384: 3a6383c6795aa56ccfa12ebeeec895f16366fda1a3b097222f540ecd4086250237c7bbc3e2c708c5f35103e3e6f422c3ep_bytes: 558bec83c4f0b8c8c45900e8807ce6fftimestamp: 2023-04-28 11:36:38
Version Info:
FileVersion: 1.1.5.0ProductVersion: 1.0.0.0Translation: 0x0409 0x04e4

TrojanSpy:Win32/Keylogger.AZ!MTB also known as:

Lionic	Trojan.Win32.KeyLogger.l!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.142331
FireEye	Generic.mg.9c271e87a34ad605
CAT-QuickHeal	TrojanSpy.KeyLogger
Skyhigh	BehavesLike.Win32.Dropper.th
McAfee	GenericRXVW-MQ!9C271E87A34A
Cylance	unsafe
Zillya	Trojan.Keylogger.Win32.79009
Sangfor	Spyware.Win32.KeyLogger.Vraq
K7AntiVirus	Trojan-Downloader ( 005b26381 )
Alibaba	TrojanSpy:Win32/KeyLogger.9b2ad554
K7GW	Trojan-Downloader ( 005b26381 )
Cybereason	malicious.7a34ad
VirIT	Trojan.Win32.Genus.VDG
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.DPH
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R014C0DCA24
Kaspersky	HEUR:Trojan-Spy.Win32.KeyLogger.gen
BitDefender	Gen:Variant.Midie.142331
Avast	Win32:SpywareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10beb65e
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.KeyLogger.wkgcp
VIPRE	Gen:Variant.Midie.142331
TrendMicro	TROJ_GEN.R014C0DCA24
Emsisoft	Gen:Variant.Midie.142331 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanSpy.KeyLogger.pzn
ALYac	Gen:Variant.Midie.142331
Varist	W32/ABApplication.VNIN-1979
Avira	TR/Spy.KeyLogger.wkgcp
Antiy-AVL	Trojan[Spy]/Win32.KeyLogger
Kingsoft	Win32.Trojan-Spy.KeyLogger.gen
Microsoft	TrojanSpy:Win32/Keylogger.AZ!MTB
Arcabit	Trojan.Midie.D22BFB
ViRobot	Trojan.Win.Z.Keylogger.2093568.B
GData	Gen:Variant.Midie.142331
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4992410
VBA32	TrojanSpy.Keylogger
Google	Detected
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.811216229
Panda	Trj/Chgt.AD
Rising	Spyware.Keylogger!8.12F (TFE:5:gP2f9MRJm3R)
Ikarus	Trojan.SPY.KeyLogger
MaxSecure	Trojan.Malware.11443257.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:SpywareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan[spy]:Win/Delf.DPH