Malware

Application.Lazy.488894 removal tips

Malware Removal

The Application.Lazy.488894 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Lazy.488894 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Application.Lazy.488894?


File Info:

name: 3082818C55656794DE59.mlw
path: /opt/CAPEv2/storage/binaries/bce2a9abf6c25207074f9554d9e97c617e13654abbdae4b9868226ed2d2e6d45
crc32: 1623EA8F
md5: 3082818c55656794de59ba683b921446
sha1: 5f07bf54ff6af0c84cbd3799f91baf1743ce6644
sha256: bce2a9abf6c25207074f9554d9e97c617e13654abbdae4b9868226ed2d2e6d45
sha512: c21de07284c1f324d938616da831a991a4586c4cea2999a22afd2e1905429e5d0beffce1bfe2b6d1f55084639ad14995f488277ccf146ab5827855a38ea857f1
ssdeep: 196608:FP50w2rWZwr5dXDWK/mj9/DSgTMazS4+WoYT8P4Ut8JQ6NZGq:VX2rbrbX6lYau4+WoY8P4Ut8JCq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19DA6233BF268713FC59D1B3206B38250997BBA61A81A8C0E47FC354DCF766701E3A656
sha3_384: 27fa2328d3a3db2240e431975e2936e5b915849c43c2111f9d359d396d9140f7d6b7f3ea6851c85ee30cd954db54eeae
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: Deep Software Inc.
FileDescription: SoftActivity Monitor Client App Demo Setup
FileVersion: 14.1.2.6475
LegalCopyright: Copyright © 2024 Deep Software Inc.
OriginalFileName:
ProductName: SoftActivity Monitor Client App Demo
ProductVersion: 14.1.2.6475
Translation: 0x0000 0x04b0

Application.Lazy.488894 also known as:

MicroWorld-eScanGen:Variant.Application.Lazy.488894
FireEyeGen:Variant.Application.Lazy.488894
SkyhighArtemis
ALYacGen:Variant.Application.Fragtor.460416
MalwarebytesGeneric.Malware/Suspicious
AlibabaRiskWare:Win32/ActivityMonitor.a96be593
ESET-NOD32multiple detections
APEXMalicious
BitDefenderGen:Variant.Application.Lazy.488894
AvastWin32:ActivityLogger-E [PUP]
EmsisoftGen:Variant.Application.Lazy.488894 (B)
GDataGen:Variant.Application.Lazy.488894
ArcabitTrojan.Application.Lazy.D775BE [many]
McAfeeArtemis!3082818C5565
MAXmalware (ai score=85)
Cylanceunsafe
IkarusPUA.KeyLogger.Activitymonitor
AVGWin32:ActivityLogger-E [PUP]
DeepInstinctMALICIOUS

How to remove Application.Lazy.488894?

Application.Lazy.488894 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment