How to remove “Lazy.219837”?

The Lazy.219837 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.219837 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Lazy.219837?


File Info:
name: 53249F4B4C46A5C6343A.mlw
path: /opt/CAPEv2/storage/binaries/8e986176a49a84c9435ffc54d8e3b7f873313d04b509a91f9c807fb5b6a710d8
crc32: 5E6573CF
md5: 53249f4b4c46a5c6343aaa18319fd3ef
sha1: 87a27e310ce1aed38cc58361405e4f9cdf564a60
sha256: 8e986176a49a84c9435ffc54d8e3b7f873313d04b509a91f9c807fb5b6a710d8
sha512: 2844d8f634187381ea66d7be573861250d9272665499b8ca363db9565869f14485efd1bd453ba4d4d4168952ffb97fdde8c98380fc792225d75ce6792e562ecb
ssdeep: 12288:lhbhm1geroTlXsSmwjNyGIkAFc7Y1hcya6hn/RVnENiKzh+jtGNy/7pKIojjm9k/:2FrCfm2NyzkAFc7SMN5zQsNai
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13E050226AB18CFA6C52D0B7C057B0B5427B856368205FFCE4FF058253D633A19D1BAE6
sha3_384: cb6d54a91b18a216757e9c3802fcec618f66c79b577fc78e7dabc4e381697715cf5c5c939d484a7e02e96a987abc3105
ep_bytes: ff2500204000b004000060090000c012
timestamp: 2022-07-12 01:35:14

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: com232term
FileVersion: 1.0.0.0
InternalName: EventFieldFor.exe
LegalCopyright: Copyright ©  2012
LegalTrademarks: 
OriginalFilename: EventFieldFor.exe
ProductName: com232term
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.219837 also known as:

Bkav	W32.AIDetectNet.01
tehtris	Generic.Malware
DrWeb	Trojan.Siggen18.23529
MicroWorld-eScan	Gen:Variant.Lazy.219837
FireEye	Gen:Variant.Lazy.219837
McAfee	Artemis!53249F4B4C46
Cyren	W32/MSIL_Kryptik.DLB.gen!Eldorado
Symantec	Scr.Malcode!gdn34
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.AFRZ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.MSIL.DOTHETUK.gen
BitDefender	Gen:Variant.Lazy.219837
Avast	Win32:PWSX-gen [Trj]
McAfee-GW-Edition	BehavesLike.Win32.Fareit.cc
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Lazy.219837
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.PWSX-gen.C5204126
MAX	malware (ai score=89)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FXHD!tr
AVG	Win32:PWSX-gen [Trj]

How to remove Lazy.219837?

Lazy.219837 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X