Lazy.172265 removal guide

The Lazy.172265 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.172265 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Lazy.172265?


File Info:
name: 8C57DD258166FA365621.mlw
path: /opt/CAPEv2/storage/binaries/5abee8d5db8ec9bb343ae5e142fec380b7f004c99685feda33e1d0f50dfb5a4b
crc32: 4F1E13AE
md5: 8c57dd258166fa365621258b4e6b1f19
sha1: adf7400e69b83a25fa7436218c81acd99b59fae8
sha256: 5abee8d5db8ec9bb343ae5e142fec380b7f004c99685feda33e1d0f50dfb5a4b
sha512: 4ca4029ba633c6dcd849735f88de17a3824f8830fa9495952cfd5c8fd772f0b7b7520209264b2acd5a511765c05125cdc69bfc4608f756e39ec38d9135980a74
ssdeep: 768:FCB7ONRCPZR8v3byDFlDWUFuWj+98D5beukQA7M9/qFZR1hEgtqyN7:FCBwRmRAclDWz98JfkT7M9Q5UyN7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1850400EACB69C27DC5472770D4F0F5F08249ADACC1828E0B92647F2B73725862997C97
sha3_384: a56804ad8be47e7b5eb2ee822549fb1487014d1210aac75d14077ee3ce865c4af133e1efd0211076ca44e9818d3f9f32
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-03-29 00:56:41

Version Info:
Translation: 0x0000 0x04b0
Comments: KFCLEANER
CompanyName: 
FileDescription: KFCLEANER
FileVersion: 1.0.0.0
InternalName: Zujjgpm.exe
LegalCopyright: Copyright ©  2014
LegalTrademarks: 
OriginalFilename: Zujjgpm.exe
ProductName: KFCLEANER
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.172265 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Gen:Variant.Lazy.172265
ALYac	Gen:Variant.Lazy.172265
Cylance	Unsafe
BitDefender	Gen:Variant.Lazy.172265
Cyren	W32/MSIL_Agent.DAY.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.LCT
APEX	Malicious
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
Ad-Aware	Gen:Variant.Lazy.172265
Emsisoft	Trojan-Downloader.Agent (A)
McAfee-GW-Edition	RDN/Generic Downloader.x
FireEye	Generic.mg.8c57dd258166fa36
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Lazy.172265
Cynet	Malicious (score: 100)
AhnLab-V3	Downloader/Win.Downloader.C5011936
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=88)
Malwarebytes	Trojan.Downloader
Rising	Trojan.Generic/MSIL@AI.91 (RDM.MSIL:YkbfMbDD0HdGgn30dUQ+mg)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.LO!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34638.lm0@aGvIT4f
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]

How to remove Lazy.172265?

Lazy.172265 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X