Malware

Lazy.10790 removal guide

Malware Removal

The Lazy.10790 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.10790 virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Collects information to fingerprint the system

How to determine Lazy.10790?


File Info:

name: 38A88593E515027603EE.mlw
path: /opt/CAPEv2/storage/binaries/ec9bfafd74f4f169719b3f6952a384855f4bc4dfdc1c7b95a0e2a0ab51682ee8
crc32: 2F4F2875
md5: 38a88593e515027603eead5ff61bb5b2
sha1: 7530909e8dc113242fa71be919200d4ce85ead73
sha256: ec9bfafd74f4f169719b3f6952a384855f4bc4dfdc1c7b95a0e2a0ab51682ee8
sha512: d2b671e591f58ea14cc05a8b5f571f676a432deec704507b5e4fb2d83cec526327e040078ec9c8683b9de7685384fad62635d98b74cadd24a158e4e887aafec7
ssdeep: 98304:jA8xW+QyN0ZSbdxLeNkidSanRb3Xh8yup358Jju8UmNrsBi6+MUkJPXShZnsfPwg:E+h0kfLeNBAyHSiJjuTmlxeUkJPXSrsH
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10356239107D989B2C168783058D953571DBD88B00EA4DC47AFE62C3DDDB8AA2703FD9E
sha3_384: 98ad481d910ffe32be18a03492c67ae6eea45248ed619f11b1d26e2dd1428d3373ba61465fd8dc660f2bc2a7424131f8
ep_bytes: 558bec837d0c017505e8c4050000ff75
timestamp: 2020-05-14 15:56:24

Version Info:

CompanyName: PlazyPCAP Geeks
FileDescription: PlazyPCAPPlugin
FileVersion: 1.0.0.1
InternalName: PlazyPCAPPlugin
LegalCopyright: Copyright PlazyPCAP Geeks (C) 2020
OriginalFilename: PlazyPCAPPlugin.dll
ProductName: PlazyPCAPPlugin
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04b0

Lazy.10790 also known as:

BkavW32.Common.62A78066
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.10790
FireEyeGeneric.mg.38a88593e5150276
SkyhighArtemis
McAfeeArtemis!38A88593E515
Cylanceunsafe
SangforTrojan.Win32.Lazy.Vdlz
CrowdStrikewin/grayware_confidence_100% (D)
ArcabitTrojan.Lazy.D2A26
SymantecML.Attribute.HighConfidence
BitDefenderGen:Variant.Lazy.10790
EmsisoftApplication.PCFixer (A)
DrWebProgram.Unwanted.5444
VIPREGen:Variant.Lazy.10790
WebrootW32.Adware.Gen
VaristW32/ABRisk.ZYXR-4217
MAXmalware (ai score=85)
Antiy-AVLTrojan/Win32.Razy
GDataGen:Variant.Lazy.10790
GoogleDetected
ALYacGen:Variant.Lazy.10790
MalwarebytesPUP.Optional.PCAcceleratePro
TrendMicro-HouseCallTROJ_GEN.R002H09AJ24
MaxSecureTrojan.Malware.137495983.susgen
FortinetAdware/PCAcceleratePro
DeepInstinctMALICIOUS

How to remove Lazy.10790?

Lazy.10790 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment