Lazy.170154 removal instruction

The Lazy.170154 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.170154 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.170154?

File Info:
name: 9ACBED623D52C4B2626C.mlw
path: /opt/CAPEv2/storage/binaries/1ef2645463030cf09b6ddfe7afd33d9efb4b46c793c9e40455fe3b73a23f92c1
crc32: 8E8C5141
md5: 9acbed623d52c4b2626cfe808c989538
sha1: 47eab37a565b601149bd5314128dc482cb13473b
sha256: 1ef2645463030cf09b6ddfe7afd33d9efb4b46c793c9e40455fe3b73a23f92c1
sha512: df3a1d0bcff3a93ba1f07b02ce4b1a231981d65ce363dc5ebb1d377b573ea7edaeba7266297ab402bcca0ddb7087f65f4e8963ddbd210119fae7360fbfe6cbcb
ssdeep: 12288:xyqS2vo1vRtcheVXFkjtPTB1OQm5Ke3BvdpNkzt2h7e9SpNbgkD/WBHCnAQvHGuq:N4c8pCZP7OQ8HBvdzQR8NhaqvJDPeD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B52502B4D1DC956AEC6545F0DA236F73C39906C16DB2CD033D876E824DB9B2972C8B88
sha3_384: 553f070ae3936ff6fd73d60cf7e0dec447f3e7d37d62187e57694d8ec63b8e0351ed2d4f504719907a3b1bce3f2b6252
ep_bytes: 558bec81ec8403000055ff155cd10901
timestamp: 2005-01-26 11:47:48

Version Info:
0: [No Data]

Lazy.170154 also known as:

How to remove Lazy.170154?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.