Lazy.109882 removal guide

The Lazy.109882 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.109882 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Lazy.109882?


File Info:
name: AFC56A8E91143DFC70FF.mlw
path: /opt/CAPEv2/storage/binaries/879f68cceb7d6726df5ccdc053e416db39bc086dbe7b388d7128b13c29f73170
crc32: 86954355
md5: afc56a8e91143dfc70fff1f1a085bdb3
sha1: 78fc2d1f621c85a62cd4f2a4ed0afa56bd684858
sha256: 879f68cceb7d6726df5ccdc053e416db39bc086dbe7b388d7128b13c29f73170
sha512: 71fe96ab3abe35f8d122966ea4bab5c3b22d87271f4b4f36ae5eede8ab264be54e63de915e7a2defe59dfc9c8f9539dd29761263a361945f67ccc563f4f8b9ba
ssdeep: 6144:L0yGdEfo5jEjxhruuJo4pMDApTYuT9Y1sYUwORbgK/q7sQjfNNJhqXaYUkX/pJev:QyGdEfo5jEjDruuJoKMDApTYuTS1sYUC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CF84E90632A45B01F43E83F740616008C3FB265BA0ADF65F6ECA74DB2666F106B55FA7
sha3_384: 00733d29345cf4330953643fd225b871fd5322ef18f6717e8748f11c28da1d23c20c35a85889a86c52398c7d09376144
ep_bytes: ff250020400000000000000000000000
timestamp: 2098-01-21 02:36:42

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WfaStok2
FileVersion: 1.0.0.0
InternalName: WfaStok2.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: WfaStok2.exe
ProductName: WfaStok2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.109882 also known as:

Lionic	Trojan.MSIL.SpyGate.m!c
MicroWorld-eScan	Gen:Variant.Lazy.109882
FireEye	Gen:Variant.Lazy.109882
McAfee	Artemis!AFC56A8E9114
Cylance	Unsafe
Sangfor	Backdoor.MSIL.SpyGate.gen
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H09B322
Kaspersky	VHO:Backdoor.MSIL.SpyGate.gen
BitDefender	Gen:Variant.Lazy.109882
Avast	Win32:BackdoorX-gen [Trj]
Comodo	Malware@#1e5yn8n6ecxwg
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Lazy.109882 (B)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Lazy.109882
Cynet	Malicious (score: 100)
MAX	malware (ai score=83)
Fortinet	PossibleThreat
AVG	Win32:BackdoorX-gen [Trj]

How to remove Lazy.109882?

Lazy.109882 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X