Lazy.10109 removal instruction

The Lazy.10109 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.10109 virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Lazy.10109?


File Info:
crc32: 0BE44D76
md5: 5cf7d763d92401b5c6f98ac2d1068c1b
name: 5CF7D763D92401B5C6F98AC2D1068C1B.mlw
sha1: 47f81651c9e537d9de04b9957cd1ebaf332aa461
sha256: a33ef3d9e453329bd359171a46152fcb84ca6edf9df11850d024abeabd68da9b
sha512: 9529fbb81049a28513964f8a8e9a04b283908c4fda6f6760844a392f4e6f92e8d63dafc2e25ea0557920fcdffcdde219cb0daed258db021f87fefd008abd22cc
ssdeep: 49152:3vbPKdPKkiEOEBitoPKjVHgOGf00ThdOyCPOKzvKfNuIhakf8V8y9Tek0THzvKf:DkPpuHgO5zPOKzMcOe81zMcOe8
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: RegAsm.exe
FileVersion: 2.0.50727.1433 (REDBITS.050727-1400)
CompanyName: Microsoft Corporation
Comments: Flavor=Retail
ProductName: Microsoftxae .NET Framework
ProductVersion: 2.0.50727.1433
FileDescription: Microsoft .NET Assembly Registration Utility
OriginalFilename: RegAsm.exe
Translation: 0x0409 0x04b0

Lazy.10109 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Lazy.10109
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (W)
Cyren	W32/Autorun.DZ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Packed.Generic-6848149-0
Kaspersky	not-a-virus:UDS:RiskTool.Win64.Injector.a
BitDefender	Gen:Variant.Lazy.10109
NANO-Antivirus	Riskware.Win32.BtcMine.exytds
MicroWorld-eScan	Gen:Variant.Lazy.10109
Ad-Aware	Gen:Variant.Lazy.10109
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Fujacks.rh
FireEye	Generic.mg.5cf7d763d92401b5
Emsisoft	Gen:Variant.Lazy.10109 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1142787
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Lazy.10109
MAX	malware (ai score=84)
Ikarus	Trojan.Dropper
Fortinet	W32/SPNR.15EG12!tr
AVG	Win32:Trojan-gen

How to remove Lazy.10109?

Lazy.10109 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X