Categories: Malware

Lazy.188947 removal instruction

The Lazy.188947 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.188947 virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Lazy.188947?


File Info:

name: CFCB639BA32DC33E2EAF.mlwpath: /opt/CAPEv2/storage/binaries/a740581009553dbffe26a58a78d68fc4f292cfe8f083b2b1f6349054c035af6ccrc32: EE118AAFmd5: cfcb639ba32dc33e2eaf1f778767ea9bsha1: e6bb28e01716cfad235e490d8fe0f4f385a79103sha256: a740581009553dbffe26a58a78d68fc4f292cfe8f083b2b1f6349054c035af6csha512: 0dfbe227bde9823092e31aa0598a4eb521a00c356a72f1d83c064c550a8f4d0b21803d768542617f7e5c3efbc910b8834de63ef3e466207a4e88200d8b1fe138ssdeep: 6144:hWU3VYFCC5Lkq+stWWQ6y6AOwYKbbjISNWUAJNu8hcNeROHqXgb:hHYFCC5AGWEmfjIS43JNvGcAHqwbtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1C5548C0C74D28672D672153047D48BB9ED7EBA310B21D9EF2794CA3A4E343C18676A6Fsha3_384: 699110b0c8c7cf6392dc8ac2c5e0b782ba3d1d0b4055ebc74795e649ffd9a46cca27dba5d88b8f3c5e01670f4dab01c3ep_bytes: e8db050000e974feffff558bec8b4508timestamp: 2022-08-13 16:05:24

Version Info:

0: [No Data]

Lazy.188947 also known as:

MicroWorld-eScan Gen:Variant.Lazy.188947
FireEye Generic.mg.cfcb639ba32dc33e
McAfee RDN/Generic PWS.y
Cylance Unsafe
Sangfor Trojan.Win32.Agent.Va72
K7AntiVirus Riskware ( 0040eff71 )
Alibaba Malware:Win32/km_24a644.None
Cybereason malicious.01716c
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Kryptik.HQMA
APEX Malicious
Kaspersky HEUR:Trojan-PSW.Win32.Reline.gen
BitDefender Gen:Variant.Lazy.188947
Avast Win32:CrypterX-gen [Trj]
Ad-Aware Gen:Variant.Lazy.188947
Emsisoft Gen:Variant.Lazy.188947 (B)
DrWeb Trojan.PWS.StealerNET.125
VIPRE Gen:Variant.Lazy.188947
TrendMicro TROJ_GEN.R002C0PHF22
McAfee-GW-Edition RDN/Generic PWS.y
Trapmine malicious.moderate.ml.score
GData Gen:Variant.Lazy.188947
Jiangmin TrojanSpy.Stealer.xky
Avira HEUR/AGEN.1250662
Antiy-AVL Trojan/Generic.ASMalwS.1B72
Arcabit Trojan.Lazy.D2E213
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win.Generic.R510674
ALYac Gen:Variant.Lazy.188947
MAX malware (ai score=84)
Malwarebytes Spyware.RedLineStealer
TrendMicro-HouseCall TROJ_GEN.R002C0PHF22
Rising Backdoor.Mokes!8.619 (CLOUD)
SentinelOne Static AI – Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/PossibleThreat
BitDefenderTheta Gen:NN.ZexaF.34592.rqY@aK3BlQe
AVG Win32:CrypterX-gen [Trj]
Panda Trj/Genetic.gen
CrowdStrike win/malicious_confidence_90% (W)

How to remove Lazy.188947?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “Malware.AI.1232470033”?

The Malware.AI.1232470033 is considered dangerous by lots of security experts. When this infection is active,…

32 mins ago

Tedy.527363 removal guide

The Tedy.527363 is considered dangerous by lots of security experts. When this infection is active,…

48 mins ago

Should I remove “Zusy.472379 (B)”?

The Zusy.472379 (B) is considered dangerous by lots of security experts. When this infection is…

52 mins ago

Win32.Morto.A removal tips

The Win32.Morto.A is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Win32/Downloader.Agent.CP potentially unwanted information

The Win32/Downloader.Agent.CP potentially unwanted is considered dangerous by lots of security experts. When this infection…

1 hour ago

Trojan:MSIL/Zusy.PTHT!MTB removal tips

The Trojan:MSIL/Zusy.PTHT!MTB is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago