Lazy.226425 removal instruction

The Lazy.226425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.226425 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Lazy.226425?


File Info:
name: F041468A8A374EC932DF.mlw
path: /opt/CAPEv2/storage/binaries/8893659a355bd1df44ea663c65ecee6dd634767f8fc71215c5dc747adb27cc07
crc32: 00DACAB3
md5: f041468a8a374ec932df862d197c49d4
sha1: 01a4e0dba4b94cab9ce104c0f09114c8273b9476
sha256: 8893659a355bd1df44ea663c65ecee6dd634767f8fc71215c5dc747adb27cc07
sha512: 34c1ed5cb440baf40b567410e44c0d7955626b059a241b782c5fd18f90f0be23007e592ccdd51c2cbb51e0053fe4530e6a5fac4e4fe2499c9f1d22f8db02ae02
ssdeep: 3072:z8HZ9MYl6f+3HfOXpCDxe7rTVw5b+bQhu9T:z8H/vleZCDMqb+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A246B66B6489953D2AC7B304F09E378432A8D5FF781158E31F4FE1B35BE0A2912BE15
sha3_384: 9c2a136de579aaaba4b9329105e079b4c43309842d654c4ec98c61abdb6c220384d21b42d8d54f253fa7eeb6d8199eb3
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-06-27 11:17:09

Version Info:
Translation: 0x0000 0x04b0
Comments: Process Hacker
CompanyName: 
FileDescription: Process Hacker
FileVersion: 2.39.0.124
InternalName: Yrent.exe
LegalCopyright: Licensed under the GNU GPL, v3.
LegalTrademarks: 
OriginalFilename: Yrent.exe
ProductName: 2.39.0.124
ProductVersion: 2.39.0.124
Assembly Version: 2.39.0.124

Lazy.226425 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.226425
FireEye	Generic.mg.f041468a8a374ec9
ALYac	Gen:Variant.Lazy.226425
VIPRE	Gen:Variant.Lazy.226425
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/MSIL_Kryptik.AIK.gen!Eldorado
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.MQF
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
BitDefender	Gen:Variant.Lazy.226425
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Lazy.226425
Emsisoft	Gen:Variant.Lazy.226425 (B)
DrWeb	Trojan.DownloaderNET.405
McAfee-GW-Edition	RDN/Generic Downloader.x
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Lazy.226425
Avira	HEUR/AGEN.1250897
Antiy-AVL	Trojan/Generic.ASMalwS.1B9
Arcabit	Trojan.Lazy.D37479
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.generic.C5028860
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=88)
Malwarebytes	Trojan.Downloader.MSIL.Generic
Rising	Downloader.Agent!8.B23 (C64:YzY0OgwLAfbwvhiCXA)
Ikarus	Trojan.Win32.VB
Fortinet	MSIL/Agent.OD!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34806.mm0@aeQI3db
AVG	Win32:DropperX-gen [Drp]

How to remove Lazy.226425?

Lazy.226425 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X