Lazy.196819 removal tips

The Lazy.196819 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.196819 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Lazy.196819?


File Info:
name: A8F17BC05834D8C1AA6A.mlw
path: /opt/CAPEv2/storage/binaries/8ad2273660d1fddd765df51b0e5a47b74c87020a72b1d5c1a952673cf3ca77cb
crc32: CD70DE90
md5: a8f17bc05834d8c1aa6a4b340ae13750
sha1: 53d51cb80e8777a5a72a671ebceb459a3d3b5f7d
sha256: 8ad2273660d1fddd765df51b0e5a47b74c87020a72b1d5c1a952673cf3ca77cb
sha512: e5846052d4f482f25a2639594742d84d23c4dde83e1b512ef8ad925ac6a3c0478345845f31a799eb13fe72d81126dca3d8fac4156d2e3ffeadc4bf1e79389fdb
ssdeep: 768:gY+OvuxEkyXiXPcWONqhwVNGyxEL4Eu8cSh4Uy9o6tHkU6hApcEsNzvhT+I:gYnvuu7XYPcNqUxEsulcCSpcEMUI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157138DC77BD2D8F3DC9140312669A7266BFEDD330060E987C768499425326E3D62BE1B
sha3_384: ddfb63d2bc1b5ac4bd6b5eccfcaf8bc48b4dbc2ffdd5ae754df1bd0a2390d065cbbc6be94a87fbd8bfd00fffbc3686d6
ep_bytes: 00374340002cfc400000d20c00000000
timestamp: 2003-05-17 03:30:17

Version Info:
0: [No Data]

Lazy.196819 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Lazy.196819
ClamAV	Win.Malware.Zbot-9756745-0
FireEye	Generic.mg.a8f17bc05834d8c1
ALYac	Gen:Variant.Lazy.196819
Cylance	Unsafe
VIPRE	Gen:Variant.Lazy.196819
CrowdStrike	win/malicious_confidence_70% (D)
Cyren	W32/Zbot.F.gen!Eldorado
Symantec	Trojan.Zbot
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Agent.NES
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.196819
Avast	Sf:Zbot-JD [Trj]
Ad-Aware	Gen:Variant.Lazy.196819
Emsisoft	Gen:Variant.Lazy.196819 (B)
Comodo	TrojWare.Win32.Spy.Zbot.ABA@1pe611
DrWeb	Trojan.PWS.Panda.9
TrendMicro	Mal_Pai-5
McAfee-GW-Edition	BehavesLike.Win32.Glupteba.ph
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
Microsoft	PWS:Win32/Zbot
GData	Gen:Variant.Lazy.196819
Google	Detected
McAfee	GenericRXRO-DF!A8F17BC05834
MAX	malware (ai score=87)
Malwarebytes	Malware.AI.1520701513
TrendMicro-HouseCall	Mal_Pai-5
Rising	Trojan.Generic@AI.100 (RDML:4oJGZbfHDuJhrh03OxgJDw)
Yandex	Trojan.NTos.Gen.2
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.NES!tr.spy
BitDefenderTheta	Gen:NN.ZexaF.34592.cmW@ainTx4i
AVG	Sf:Zbot-JD [Trj]

How to remove Lazy.196819?

Lazy.196819 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X