Categories: Malware

Lazy.209354 removal instruction

The Lazy.209354 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.209354 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Behavioural detection: Injection (Process Hollowing)
  • Behavioural detection: Injection (inter-process)
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.209354?


File Info:

name: B92655174CA721431C1C.mlwpath: /opt/CAPEv2/storage/binaries/8d724510c97626325f6cf2efe2418f993a663d06403fbf571808cf38d48b283dcrc32: 09E58780md5: b92655174ca721431c1c37ffbdfdebf5sha1: 50df8a42904a4d4754e79735c38a077560c78f5csha256: 8d724510c97626325f6cf2efe2418f993a663d06403fbf571808cf38d48b283dsha512: 78f2bccc40d2d1cfffd131fbed11c1c49a1c3c7d5afc317e46b0d3c73417e98d89d8fac017d4c72f638a470dd726bf71b4f9a4248d7a2ed75066f51eee9fbc5fssdeep: 98304:6bdCW0+KtQ857cSPCGF+jd5waPk4dIAjINNt9IVn+b:eCW0C82SPCpDwaFdIAKNfIB+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T127363376C3C44B2EDAF897374BEA5DB33DB87C70952B949BC0CAEA2D40605E06235746sha3_384: d9b1269b51acb09b772ddcd847d6aab0d07733197ae516cd952891fc66b6ac76c71741b6ae4b4e274f5ed31a8df4fd8fep_bytes: e80a000000e97affffffcccccccccc8btimestamp: 2008-04-13 18:32:45

Version Info:

0: [No Data]

Lazy.209354 also known as:

Bkav W32.AIDetectMalware
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Lazy.209354
CAT-QuickHeal Trojan.Bulta.7930
Skyhigh BehavesLike.Win32.Generic.rc
McAfee Artemis!B92655174CA7
Malwarebytes Generic.Malware/Suspicious
VIPRE Gen:Variant.Lazy.209354
Sangfor Downloader.Win32.Pakes.Vzbj
K7AntiVirus Trojan-Downloader ( 0055e3da1 )
BitDefender Gen:Variant.Lazy.209354
K7GW Trojan-Downloader ( 0055e3da1 )
CrowdStrike win/malicious_confidence_70% (W)
Baidu Win32.Trojan.Injector.hz
VirIT Trojan.Win32.Pakes.OZX
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Win32/TrojanDownloader.VB.OXJ
APEX Malicious
TrendMicro-HouseCall WORM_KOLAB.SMQX
ClamAV Win.Trojan.Pakes-4232
Kaspersky Trojan.Win32.Pakes.ozx
Alibaba TrojanDownloader:Win32/Pakes.90179c77
NANO-Antivirus Trojan.Win32.Pakes.hgyqc
Avast Win32:Inject-AKN [Trj]
Tencent Win32.Trojan.Pakes.Wdkl
Emsisoft Gen:Variant.Lazy.209354 (B)
DrWeb Trojan.Siggen2.31206
TrendMicro WORM_KOLAB.SMQX
Trapmine malicious.high.ml.score
FireEye Gen:Variant.Lazy.209354
Sophos Mal/Generic-S
SentinelOne Static AI – Malicious SFX
MAX malware (ai score=100)
Jiangmin Trojan/Pakes.nbk
Google Detected
Antiy-AVL Trojan/Win32.Pakes
Kingsoft Win32.Trojan.Pakes.ozx
Microsoft Trojan:Win32/Wacatac.B!ml
Xcitium Malware@#262n8p5hw7bi4
Arcabit Trojan.Lazy.D331CA [many]
ZoneAlarm Trojan.Win32.Pakes.ozx
GData Gen:Variant.Lazy.209354 (2x)
AhnLab-V3 Trojan/Win32.Monder.C44120
BitDefenderTheta Gen:NN.ZexaF.36802.emKfaihenOci
ALYac Gen:Variant.Lazy.209354
TACHYON Trojan/W32.Agent.4974080.B
VBA32 Trojan.AVKiller.xb
Cylance unsafe
Panda Trj/CI.A
Rising Downloader.VB!8.1EB (CLOUD)
Yandex Trojan.Pakes!2fJyHYmb7HU
Ikarus Backdoor.Win32.Bifrose
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Pakes.OZX!tr
AVG Win32:Inject-AKN [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:Win/Pakes.ozx

How to remove Lazy.209354?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago