Should I remove “Lazy.190100”?

The Lazy.190100 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.190100 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Lazy.190100?


File Info:
name: 9E0266853EC38BF7A4DD.mlw
path: /opt/CAPEv2/storage/binaries/168768df6b930f3e63a59c7eca38ba7b53a2a411d967804f1bdf1bf6ee4d9593
crc32: E1B588CE
md5: 9e0266853ec38bf7a4dd33641c41e1a7
sha1: b1a1e2f8b51caab773d2e0d5466ece1b5bcd6f76
sha256: 168768df6b930f3e63a59c7eca38ba7b53a2a411d967804f1bdf1bf6ee4d9593
sha512: 20e4b736185b844058f9b449b6312464bedd326bdefd24f1e868d437fcf52e9bbb6365b189a00563ed2182344d107c226c4f60e8738492610b2c995ce2fc21f4
ssdeep: 1536:g/NHdEJsBAQZzdh8CM9TtD4yRZQVx5NJ2:g1HdIsB/5mCGB4Z/Ns
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B8732807A2D0FA72D10146F23B18E6D8E1B4BE354592D807FE41BB2D2BB56DE676031B
sha3_384: e2f82aa64ebd5e5196b072e0b43407bf98f091d8d7be63feaee995a05fa78a2b9cdfb425cdb3ab7e458142c0b956e3a5
ep_bytes: 68c4164000e8f0ffffff000000000000
timestamp: 2011-03-07 19:47:18

Version Info:
Translation: 0x0409 0x04b0
CompanyName: gf
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe

Lazy.190100 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Llac.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.190100
ClamAV	Win.Trojan.Llac-181
FireEye	Generic.mg.9e0266853ec38bf7
Skyhigh	BehavesLike.Win32.Rontokbro.lh
McAfee	Artemis!9E0266853EC3
Zillya	Trojan.Llac.Win32.5614
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 0055e3991 )
Alibaba	TrojanPSW:Win32/Bifrose.cfd5e2a1
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.8b51ca
Arcabit	Trojan.Lazy.D2E694
BitDefenderTheta	AI:Packer.C7C0E82B1F
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.FAQ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Llac.rle
BitDefender	Gen:Variant.Lazy.190100
NANO-Antivirus	Trojan.Win32.Llac.fmywmc
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10b81c07
Emsisoft	Gen:Variant.Lazy.190100 (B)
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.VbCrypt.250
VIPRE	Gen:Variant.Lazy.190100
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Llac
Jiangmin	Trojan.Llac.bcm
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Llac
Kingsoft	Win32.Trojan.Llac.rle
Xcitium	Malware@#3tgbj1p45ye0f
Microsoft	PWS:Win32/Zbot.GG!MTB
ZoneAlarm	Trojan.Win32.Llac.rle
GData	Gen:Variant.Lazy.190100
AhnLab-V3	Trojan/Win32.Llac.C45417
Acronis	suspicious
VBA32	BScope.Trojan.VBKrypt
ALYac	Gen:Variant.Lazy.190100
MAX	malware (ai score=68)
Panda	Generic Malware
Yandex	Trojan.GenAsa!aJwbX+1cQus
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.2C25D5!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Lazy.190100?

Lazy.190100 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X