Malware

Lazy.193055 removal

Malware Removal

The Lazy.193055 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.193055 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • A file was accessed within the Public folder.
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • Executed a very long command line or script command which may be indicative of chained commands or obfuscation
  • Authenticode signature is invalid
  • A scripting utility was executed
  • A script or command line contains a long continuous string indicative of obfuscation
  • Deletes executed files from disk
  • Attempts to execute suspicious powershell command arguments
  • Anomalous binary characteristics

How to determine Lazy.193055?


File Info:

name: 34EE42E65BD8BE785D1B.mlw
path: /opt/CAPEv2/storage/binaries/ab74acc372e3b28c93fcbf947bd83e45c706b5193df0817202c7087e4eafb70b
crc32: B8D45A8B
md5: 34ee42e65bd8be785d1b2b99dc02b2bc
sha1: f2c17f45cb161c9c8542d850946ec0554f5cd0f5
sha256: ab74acc372e3b28c93fcbf947bd83e45c706b5193df0817202c7087e4eafb70b
sha512: 0412ac6f4866d85ad9646122d64a175b37b4f1e567d5cba6712ecaca0f05b7c43047455350c1d20ad8ba9e5cff4751384a106365debc05be17909825abbe94ea
ssdeep: 384:xZmE8Hyvl8emU8NJkWiY0JspwqFxTqx6t09i0pouWGn33ERtYT24zqvl:oy2U8JriY0JOPKi0pr0jSxzk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18FA3E4F17668C4A6FA04C23A8CB5C5FB45771C31AFA485A76109FFBDEB32A724D16204
sha3_384: a46e506236c23a89c8976d209e8d05ee5e0a995a0d6ee7c31587f805c10a5634d69656df9a24e000160368a62e2558e0
ep_bytes: 5589e581ec0800000090b80400000050
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Lazy.193055 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.193055
SkyhighBehavesLike.Win32.Shohdi.cz
McAfeeGenericRXUZ-MV!34EE42E65BD8
MalwarebytesTrojan.BitCoinMiner
ZillyaDownloader.SmallAGen.Win32.139
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
K7GWTrojan-Downloader ( 005a7a461 )
K7AntiVirusTrojan-Downloader ( 005a7a461 )
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDownloader.Small_AGen.D
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win64.Agent.gen
BitDefenderGen:Variant.Lazy.193055
NANO-AntivirusTrojan.Win32.PsDownload.jszcmu
AvastWin32:Evo-gen [Trj]
TencentMalware.Win32.Gencirc.13afeac1
EmsisoftGen:Variant.Lazy.193055 (B)
F-SecureTrojan.TR/Dropper.Gen
VIPREGen:Variant.Lazy.193055
FireEyeGeneric.mg.34ee42e65bd8be78
GDataWin32.Trojan.PSE.1M4ZDT4
JiangminTrojan.Agent.elcr
GoogleDetected
AviraTR/Dropper.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan[Downloader]/Win32.Small
Kingsoftmalware.kb.a.823
ArcabitTrojan.Lazy.D2F21F
ZoneAlarmHEUR:Trojan.Win64.Agent.gen
MicrosoftTrojanDownloader:Win32/Small.RDSA!MTB
VaristW32/Bingoml.H.gen!Eldorado
AhnLab-V3Trojan/Win.Generic.R497666
BitDefenderThetaGen:NN.ZexaF.36680.gqX@a8uJnjgi
ALYacGen:Variant.Lazy.193055
VBA32BScope.Trojan.Nitol
RisingBackdoor.DcRat!8.129D9 (TFE:1:BNER4NzZWDL)
YandexTrojan.DL.Small_AGen!kN005oupCcY
IkarusTrojan-Downloader.Win32.Small
MaxSecureTrojan.Malware.73483192.susgen
FortinetW32/Tiny.NFR!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS

How to remove Lazy.193055?

Lazy.193055 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment