Should I remove “Lazy.335260”?

The Lazy.335260 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.335260 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial language used in binary resources: Spanish
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Collects information to fingerprint the system
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.335260?

File Info:
name: FB6B13954F776644990B.mlw
path: /opt/CAPEv2/storage/binaries/45afebdccd4aefd78555f905cd3ce8d4e489ebfb2def45f4fd21f7ffeefa97bd
crc32: 15C9E6BC
md5: fb6b13954f776644990b69351ab42d18
sha1: a05eb39dfaf9255d65e7e9b6f9198f19bfaa1426
sha256: 45afebdccd4aefd78555f905cd3ce8d4e489ebfb2def45f4fd21f7ffeefa97bd
sha512: b9b6427c35da24b28e32e3558e09ed78c6ede6be8a523f1c69c11c5f3bf752e784d19f8dd842ff73d6d8aff088f1e7d57027ea3b93f7fcf1a63c1751499413e6
ssdeep: 6144:ay8Fk0FGy917qcINjDqPfEBCyTIDIFl6JRfoGqj:ay8FkSh77qcMjD0tBDIqfw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1981412655342C4A0D94A393293834D6187749C68ADE47C352A99FBBFC8713C13EADBBC
sha3_384: d81552f6d47d641ef0f9833b1a13a57f5f0c0ad8a82f277db7707445c47b20a92293e8e8851e4b57658c6dd7638b8e44
ep_bytes: 60be151043008dbeebfffcff57eb0b90
timestamp: 2013-07-12 16:44:18

Version Info:
CompanyName: Hilgraeve, Inc.
FileDescription: HyperTerminal Applet
FileVersion: 5.1.2600.0
Translation: 0x0409 0x0000

Lazy.335260 also known as:

How to remove Lazy.335260?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.