How to remove “Lazy.331927”?

The Lazy.331927 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.331927 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Checks for the presence of known devices from debuggers and forensic tools
• Checks for the presence of known devices from debuggers and forensic tools
• Attempts to access Bitcoin/ALTCoin wallets
• Touches a file containing cookies, possibly for information gathering
• Harvests credentials from local FTP client softwares
• Installs WinPCAP
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.331927?

File Info:
name: 8A37AAD191BEAEC60295.mlw
path: /opt/CAPEv2/storage/binaries/203c659460a9387bfccdb8784ffc5c2b06759961eef109f7b972baf335174e22
crc32: B1EF14B7
md5: 8a37aad191beaec602952c33bbf41f30
sha1: f46b73866632fc58aa45beece2e201db03edfa66
sha256: 203c659460a9387bfccdb8784ffc5c2b06759961eef109f7b972baf335174e22
sha512: 57cfea85192e92062e131f485ef446216695c9fbd6a4632abda9b8bba0a4e207b880ec60b9128edf10053fcb11af8480a8088909372c571d30cc7df3133f5bf4
ssdeep: 12288:pmNFxw8+e53POk7/B/Msv9l2M6/AIo5N3ESugRXG5Px2BOtww:pmNFx0e5mkjRMjwLW5Mwt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D052383DAC11874CEA4B63184F0AE88F21B0C5585549DB67E2CACE3277F7025B5A6F7
sha3_384: b82afaca0256193bebdc8ab66f9eb5ea15975a604ec9acf11337e9f6f6e0fea5392227a72381b107b11dc3b61b172c0d
ep_bytes: 33c009e0663df0fd72678d15b09fbfff
timestamp: 2014-02-01 17:22:31

Version Info:
0: [No Data]

Lazy.331927 also known as:

How to remove Lazy.331927?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.