Categories: Trojan

How to remove “Trojan:Win32/Lazy.ASBD!MTB”?

The Trojan:Win32/Lazy.ASBD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Lazy.ASBD!MTB virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Deletes executed files from disk
Anomalous binary characteristics

How to determine Trojan:Win32/Lazy.ASBD!MTB?


File Info:
name: A31E9019F34EBEA4D250.mlwpath: /opt/CAPEv2/storage/binaries/9f2a56e13c0a293e44b9b04ca68df792a4501614fc06c9847e34ec18b189a849crc32: 9DBAF245md5: a31e9019f34ebea4d25090f0d6971ff2sha1: 7980845547f7fdac908474bc223b33d818e57a8esha256: 9f2a56e13c0a293e44b9b04ca68df792a4501614fc06c9847e34ec18b189a849sha512: 1c6e62d4e4691ece1bb759944e6e09844175dfe232ba0afeb0e9d2d2c7b9c2c46cbca609aad2644daa0bf928a013cb64bf6a6ec6c5ddad93d991a74e1344771fssdeep: 384:v/4LNJY74JwOllSBQmrb0i5PrmqHIKpa54b5f0iws5:v/qSamrxDmqoKM4Z0iwutype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T122D2C523BBA28572E69347312CF6C6A459637C281F038B4B7554333D2C32E92AD6975Bsha3_384: 0ce2fa0088ef29509d24dc8e11d6bfa7f7c25b4d8401667f57743ebeb45c453a4491e55e6f9fb445773df28008c9b319ep_bytes: 68e4144000e8f0ffffff000000000000timestamp: 2010-12-28 08:42:54
Version Info:
Translation: 0x0804 0x04b0CompanyName:  ProductName: goFileVersion: 1.00.0250ProductVersion: 1.00.0250InternalName: 66OriginalFilename: 66.exe

Trojan:Win32/Lazy.ASBD!MTB also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader6.27491
MicroWorld-eScan	Gen:Variant.Lazy.273647
FireEye	Generic.mg.a31e9019f34ebea4
CAT-QuickHeal	Trojan.VBCrypt.MF.6535
Skyhigh	BehavesLike.Win32.Trojan.mz
McAfee	Downloader-CLU
Malwarebytes	Malware.AI.1295461746
VIPRE	Gen:Variant.Lazy.273647
Sangfor	Suspicious.Win32.Save.vb
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Lazy.273647
K7GW	Riskware ( 0015e4f11 )
K7AntiVirus	Riskware ( 0015e4f11 )
BitDefenderTheta	Gen:NN.ZevbaF.36792.bm1@am7hn2ob
VirIT	Trojan.Win32.Generic.AZRX
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/VB.PLO
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Trojan.Win32.VB.bwtf
NANO-Antivirus	Trojan.Win32.VB.eiesof
ViRobot	Trojan.Win32.A.VB.28683
Rising	Downloader.VB!1.657B (CLASSIC)
F-Secure	Trojan.TR/Dropper.Gen
Zillya	Trojan.VB.Win32.99250
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Lazy.273647 (B)
Ikarus	Trojan.Win32.VB
GData	Gen:Variant.Lazy.273647
Jiangmin	Trojan/VB.ckcg
Webroot	W32.Rogue.Gen
Varist	W32/Esfury.A.gen!Eldorado
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.VB
Kingsoft	malware.kb.a.997
Arcabit	Trojan.Lazy.D42CEF
ZoneAlarm	Trojan.Win32.VB.bwtf
Microsoft	Trojan:Win32/Lazy.ASBD!MTB
Google	Detected
AhnLab-V3	Trojan/Win32.Downloader.R19185
VBA32	Trojan.VBRA.0373
ALYac	Gen:Variant.Lazy.273647
MAX	malware (ai score=86)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10bf3ba8
Yandex	Trojan.DR.Agent!ynWOXltrD40
SentinelOne	Static AI – Malicious PE
Fortinet	W32/VB.PLO!tr
AVG	Win32:Dropper-EFZ [Drp]
Cybereason	malicious.547f7f
Avast	Win32:Dropper-EFZ [Drp]