About “Lazy.208798” infection

The Lazy.208798 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.208798 virus can do?

Authenticode signature is invalid

How to determine Lazy.208798?


File Info:
name: D329D4533FF29F87DEA4.mlw
path: /opt/CAPEv2/storage/binaries/1201625444495c291c2e9b68defc2ec21f86990a8a1b03cadc2c4d365d19d75e
crc32: C635869A
md5: d329d4533ff29f87dea49f18ef65238b
sha1: 1cfc87c572160cf08c3cd7badbc147117a4217bc
sha256: 1201625444495c291c2e9b68defc2ec21f86990a8a1b03cadc2c4d365d19d75e
sha512: 14c8261a6b3cb0acb4afb6dd0f6982bd68a254e7cb7b1ff97d33093377ddc17d94947cef5f668dc209cc6e2cb6831a15d76842728555a7b2f8dbd05b5c898e9e
ssdeep: 3072:W5Fyfv95xge4KAkU5U3H2XzbTMq7DHGTz9HH:WTyf10evX2XznHHGT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CC95AE67CE74E889C2D4523369912616EF2F6D35ABBF53340CA11C772CAE895331B227
sha3_384: c78e3b8440627acc16e534ee74bc1be3c4cd8d1dc91b19a343f41bcc51b0e28a7eb76275689e3f25ffc037bf92756bbb
ep_bytes: bae5114000ffe208dcd506ad38743c67
timestamp: 1993-08-11 03:59:07

Version Info:
CompanyName: 
FileDescription: SDL_ttf
FileVersion: 2, 0, 7, 0
InternalName: SDL_ttf
LegalCopyright: Copyright © 2002 Sam Lantinga
OriginalFilename: SDL_ttf.dll
ProductName: Simple DirectMedia Layer
ProductVersion: 2, 0, 7, 0
Translation: 0x0409 0x04b0

Lazy.208798 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Dapato.b!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.208798
ClamAV	Win.Malware.Razy-7004488-0
FireEye	Generic.mg.d329d4533ff29f87
Skyhigh	BehavesLike.Win32.Infected.tz
ALYac	Gen:Variant.Lazy.208798
Malwarebytes	Crypt.Trojan.Malicious.DDS
Zillya	Trojan.Kryptik.Win32.899345
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0054cb111 )
Alibaba	TrojanDropper:Win32/Dapato.9e6fc3d6
K7GW	Trojan ( 0054cb111 )
Cybereason	malicious.572160
BitDefenderTheta	Gen:NN.ZexaF.36738.4v0@aeqmU3b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.AKIV
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Dropper.Win32.Dapato.byo
BitDefender	Gen:Variant.Lazy.208798
NANO-Antivirus	Trojan.Win32.Stegvob.ebyfkv
Avast	Win32:MalOb-ID [Cryp]
Tencent	Win32.Trojan-Dropper.Dapato.Ijgl
Emsisoft	Gen:Variant.Lazy.208798 (B)
F-Secure	Trojan.TR/Stegvob.amnra
Baidu	Win32.Trojan.Kryptik.adl
VIPRE	Gen:Variant.Lazy.208798
Trapmine	malicious.high.ml.score
Sophos	Troj/Agent-RNY
Ikarus	Trojan-Downloader.Win32.Dapato
GData	Gen:Variant.Lazy.208798
Google	Detected
Avira	TR/Stegvob.amnra
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	Win32.Troj.Undef.a
Xcitium	TrojWare.Win32.Spy.Zbot.GC@4knng6
Arcabit	Trojan.Lazy.D32F9E
ZoneAlarm	Trojan-Dropper.Win32.Dapato.byo
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Varist	W32/Trojan2.NNRG
AhnLab-V3	Downloader/Win.Dapato.R604672
McAfee	GenericRXAA-FA!D329D4533FF2
MAX	malware (ai score=99)
VBA32	TrojanDropper.Dapato
Cylance	unsafe
Panda	Trj/Banker.JJG
Rising	Trojan.Win32.Gnail.c (CLASSIC)
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Kryptik.HZ!tr
AVG	Win32:MalOb-ID [Cryp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Lazy.208798?

Lazy.208798 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X