About “Lazy.250939” infection

The Lazy.250939 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.250939 virus can do?

Authenticode signature is invalid

How to determine Lazy.250939?


File Info:
name: C4ACAD725BFC62EDCAA6.mlw
path: /opt/CAPEv2/storage/binaries/d0952ebf011f9d3e7bbc6fc56ef58c631467a6b6030f619cbae205a5c6a2f1dc
crc32: 44296E69
md5: c4acad725bfc62edcaa6d37361cf120f
sha1: 86b9a7f17157e956a8172eb1c2c872ebfbfa2186
sha256: d0952ebf011f9d3e7bbc6fc56ef58c631467a6b6030f619cbae205a5c6a2f1dc
sha512: f9cf65ba0ace602a97616a564183bad8fecdabc7692e598eaa4ae393c05fab34b9a28b5e4828ab76e63f382fa3cd33347554d41047b3012a30e1c7815ab7eeee
ssdeep: 6144:QHKG6pyZPCtT0ICidHvnkJF3PwjW5AO78Gt5lgxC6/h4vmA7:hGI2PCtwICidPOK33/h4v1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AA64AF0070909071F67395323AF8AA79563D7D30076669FB63D43EEF7F20AE1A63152A
sha3_384: 9287805787df6850dfdb4739bcf48a14bea4ca9d63973b0acf79433bf6609a08408edeaa2f125e21b0fd357db3144b51
ep_bytes: e8fe050000e974feffff558bec8b4508
timestamp: 2022-10-03 11:38:07

Version Info:
0: [No Data]

Lazy.250939 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.StealerNET.125
MicroWorld-eScan	Gen:Variant.Lazy.250939
FireEye	Generic.mg.c4acad725bfc62ed
ALYac	Gen:Variant.Lazy.250939
Cylance	Unsafe
VIPRE	Gen:Variant.Lazy.250939
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZexaF.34698.tqW@aOaKyao
Cyren	W32/Injector.BCD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HQMY
APEX	Malicious
ClamAV	Win.Malware.Pwsx-9963812-0
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.pef
BitDefender	Gen:Variant.Lazy.250939
Avast	Win32:CrypterX-gen [Trj]
Ad-Aware	Gen:Variant.Lazy.250939
Emsisoft	Gen:Variant.Lazy.250939 (B)
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Lazy.250939
Google	Detected
Avira	TR/Crypt.Agent.uokol
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASMalwS.50E8
Arcabit	Trojan.Lazy.D3D43B
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R524667
Acronis	suspicious
McAfee	GenericRXUJ-AZ!C4ACAD725BFC
VBA32	TrojanPSW.Arkei
Malwarebytes	Trojan.Crypt
Rising	Backdoor.Agent!8.C5D (TFE:5:1UTlbi41jUP)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/DotNetPacker.F!tr
AVG	Win32:CrypterX-gen [Trj]

How to remove Lazy.250939?

Lazy.250939 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X