Categories: Malware

Lazy.210430 removal tips

The Lazy.210430 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.210430 virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Lazy.210430?


File Info:
name: B940D3391FD64F128899.mlwpath: /opt/CAPEv2/storage/binaries/78aa2d18c9edb6657939c7dbe3d99670abc3a7cd59bd380fa46ec78e6bf2e3e0crc32: 2659A191md5: b940d3391fd64f12889995cd432e2ae9sha1: 5078c5956e440f1c57f6d845508f964a1335affesha256: 78aa2d18c9edb6657939c7dbe3d99670abc3a7cd59bd380fa46ec78e6bf2e3e0sha512: 0ae683caac7cc9f681cacecc92164c97b0f0f788c64ea7216f2bf8c866a53babb21df9d0182899c88f26d47d1b3672e96c4a781d0fb166a85397fda6a8646255ssdeep: 3072:Usd2slSQfbGGqfFYTHuDtLOm+jCyOe/outiucZI4+Ey:tlSoGG2YDuIRj//oSizZxWtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D484CC9249683159FF1B91B34A59BA7933F07B25B010D489C9732DCCFFBA2442C6A3D9sha3_384: c0b1b09a2626df105918b05bab477f7072ef14bc4c885e72089b5f8ace4770fea5242dd3ff9f49f1d755e1e5ed149a9dep_bytes: 60be00804e008dbe0090f1ff5789e58dtimestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: Password ServiceFileDescription: MYOB Password RecoveryFileVersion: 2015.1.1.10InternalName: MYOB Password RecoveryLegalCopyright: Copyright © 2004-2015 Password ServiceOriginalFilename: umypwdr11J.exeProductName: MYOB Password RecoveryProductVersion: 2015.1.1.10Translation: 0x0409 0x04e4

Lazy.210430 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Lazy.210430
FireEye	Gen:Variant.Lazy.210430
Skyhigh	BehavesLike.Win32.RealProtect.ft
ALYac	Gen:Variant.Lazy.210430
Cylance	unsafe
VIPRE	Gen:Variant.Lazy.210430
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Lazy.210430
Arcabit	Trojan.Lazy.D335FE
BitDefenderTheta	Gen:NN.ZexaF.36792.wm0@aiRvkwek
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
Sophos	Generic ML PUA (PUA)
F-Secure	Heuristic.HEUR/AGEN.1334848
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Lazy.210430 (B)
Ikarus	Trojan.Crypt
MAX	malware (ai score=88)
Google	Detected
Avira	HEUR/AGEN.1334848
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Lazy.210430
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!B940D3391FD6
SentinelOne	Static AI – Malicious PE
Fortinet	W32/ULPM.16C0!tr
AVG	FileRepMalware [Misc]
Avast	FileRepMalware [Misc]