Malware

How to remove “Lazy.328293”?

Malware Removal

The Lazy.328293 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.328293 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.328293?


File Info:

name: C29B233FF7FBDAB8FB66.mlw
path: /opt/CAPEv2/storage/binaries/2a2c5f9cdce47e558c80eb6e8f0985259178d73600461a0fd573a11bb81e53ff
crc32: 354D9876
md5: c29b233ff7fbdab8fb666966f4dbf258
sha1: 12b2917765349ed788853a9bd3a2a8505dc2a12e
sha256: 2a2c5f9cdce47e558c80eb6e8f0985259178d73600461a0fd573a11bb81e53ff
sha512: 37626667f9134b63ebac1a7215669aa97e1cf3c76febcc3629966c707a268d4f3abb88f03aae613ada2cbad5c0fc671c88e84aff3c8889ec133bb9d4ce9519e1
ssdeep: 24576:/3cuIaPeaSpUUmGD87d5CU5ertK+gR9fea/ZSE0E77i:/xmPUFGDmd5CnB7gR9fegl0ES
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E225CF0C3784B653D116A63DE51D9AE086A22C3CFA77D67274917F6779E3BACC0092B0
sha3_384: 0f9907f5be6402a41275c6bf38d680b56b101a8e92f11b873b34bde3cec1780ce1de1cb32bb49f6bed3bde25107f5c54
ep_bytes: 8a716586da18e101dff9e8905db3802a
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.328293 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Lazy.328293
ClamAVWin.Packed.Razy-9836307-0
FireEyeGeneric.mg.c29b233ff7fbdab8
SkyhighBehavesLike.Win32.Generic.dc
McAfeeTrojan-FVOQ!C29B233FF7FB
ZillyaTrojan.Generic.Win32.625167
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
AlibabaTrojan:Win32/Cerber.51f29fd2
K7GWTrojan ( 005a45ef1 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGD
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGen:Variant.Lazy.328293
NANO-AntivirusTrojan.Win32.Kryptik.fmufax
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
TACHYONTrojan/W32.Selfmod
EmsisoftGen:Variant.Lazy.328293 (B)
F-SecureHeuristic.HEUR/AGEN.1369103
DrWebTrojan.PackedENT.216
VIPREGen:Variant.Lazy.328293
Trapminemalicious.moderate.ml.score
SophosTroj/Agent-BFEY
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1B28NHU
JiangminTrojan.Generic.gkwib
GoogleDetected
AviraHEUR/AGEN.1369103
Antiy-AVLTrojan/Win32.Kryptik.gify
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D50265
ZoneAlarmVHO:Trojan.Win32.Copak.gen
MicrosoftTrojan:Win32/Cerber.MPI!MTB
VaristW32/Trojan.MJSE-7842
AhnLab-V3Packed/Win.FJB.R626411
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36744.88Z@aS75Qdi
ALYacGen:Variant.Lazy.328293
MAXmalware (ai score=83)
VBA32Trojan.Copak
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
IkarusTrojan-Downloader.Win32.FakeAlert
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.765349
DeepInstinctMALICIOUS

How to remove Lazy.328293?

Lazy.328293 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment