Categories: Trojan

Trojan:Win32/Lazy.ASBD!MTB removal guide

The Trojan:Win32/Lazy.ASBD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Lazy.ASBD!MTB virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Deletes executed files from disk
Anomalous binary characteristics

How to determine Trojan:Win32/Lazy.ASBD!MTB?


File Info:
name: F3E48947D722C0E8F962.mlwpath: /opt/CAPEv2/storage/binaries/ba63125d363bc26af9e81388a03e8a3b9c14ce7e97776c79ac33c20270dc687acrc32: DC4BC130md5: f3e48947d722c0e8f962427cd2ab195fsha1: 9cdde4ad7896ef7740eb593c9af862352e6d972asha256: ba63125d363bc26af9e81388a03e8a3b9c14ce7e97776c79ac33c20270dc687asha512: db927029d454c014f1c060ec27c93d2e471e281244858f7ab6231da275c0a14125664ad7eb1f533b4f3d1a5b811a07fc990fe9e5a96a3014520738a04d08d82essdeep: 384:v/4LNJY74JwOllSBQmrb0i5PrmqHIKpa54b5f0iwssS:v/qSamrxDmqoKM4Z0iwutype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E3D2C623BBA28572E69347312CF6C7A459637C281F038B4B7554333D2C32E92AD6975Bsha3_384: 5f33e661785ea2e6a916110da6fb24869164198c12ec8df14b3781a5483fdcb1e163aa1f2fc88044137d9de56ab1eb0bep_bytes: 68e4144000e8f0ffffff000000000000timestamp: 2010-12-28 08:42:54
Version Info:
Translation: 0x0804 0x04b0CompanyName:  ProductName: goFileVersion: 1.00.0250ProductVersion: 1.00.0250InternalName: 66OriginalFilename: 66.exe

Trojan:Win32/Lazy.ASBD!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.VB.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.VBCrypt.MF.6535
Skyhigh	Downloader-CLU
ALYac	Gen:Variant.Lazy.273647
Malwarebytes	Malware.AI.1295461746
VIPRE	Gen:Variant.Lazy.273647
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Riskware ( 0015e4f11 )
K7GW	Riskware ( 0015e4f11 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZevbaF.36792.bm1@am7hn2ob
VirIT	Trojan.Win32.Generic.AZRX
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/VB.PLO
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.VB.bwtf
BitDefender	Gen:Variant.Lazy.273647
NANO-Antivirus	Trojan.Win32.VB.eiesof
ViRobot	Trojan.Win32.A.VB.28683
MicroWorld-eScan	Gen:Variant.Lazy.273647
Rising	Downloader.VB!1.657B (CLASSIC)
Emsisoft	Gen:Variant.Lazy.273647 (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoader6.27491
Zillya	Trojan.VB.Win32.99250
TrendMicro	TROJ_GEN.R002C0DK323
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.f3e48947d722c0e8
Sophos	Mal/Generic-R
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Lazy.273647
Jiangmin	Trojan/VB.ckcg
Webroot	W32.Rogue.Gen
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.VB
Kingsoft	malware.kb.a.994
Gridinsoft	Trojan.Win32.Downloader.oa!s1
Arcabit	Trojan.Lazy.D42CEF
ZoneAlarm	Trojan.Win32.VB.bwtf
Microsoft	Trojan:Win32/Lazy.ASBD!MTB
Varist	W32/Esfury.A.gen!Eldorado
AhnLab-V3	Trojan/Win32.Downloader.R19185
McAfee	Downloader-CLU
TACHYON	Trojan/W32.VB-Agent.28824
DeepInstinct	MALICIOUS
VBA32	Trojan.VBRA.0373
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DK323
Tencent	Malware.Win32.Gencirc.10bf3ba8
Ikarus	Trojan.Win32.VB
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VB.PLO!tr
AVG	Win32:Dropper-EFZ [Drp]
Cybereason	malicious.d7896e
Avast	Win32:Dropper-EFZ [Drp]