Malware

How to remove “Lazy.336445”?

Malware Removal

The Lazy.336445 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.336445 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Lazy.336445?


File Info:

name: 53449C78E7DFE3215699.mlw
path: /opt/CAPEv2/storage/binaries/83457bbacf7d6e4554b7c291564a3160654f821c1e3df46257144180fe6bbc55
crc32: 4373C65B
md5: 53449c78e7dfe32156998656b085fa27
sha1: c7d3f1903bfb9dce1138012d6cc0f4f788681034
sha256: 83457bbacf7d6e4554b7c291564a3160654f821c1e3df46257144180fe6bbc55
sha512: b70c14f10fe81f790393a1612e405e94b4a142eb9936f3f24302e40a38d1de1170044af5b8cb807898199a200b6919266823b197de3a60ffd1ccde61fd13c4cd
ssdeep: 49152:SXevnfzlHVfUdsmngsiTbq4TTow+lsgVy1hySd/WF7kzIKAghbq4TTZ:gevft4iThTW81hynFoIAhTt
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E9F5E02C27562887C42B2737EC5DC67F504629BD7BA3D7BE3490369EB8127C8D902A74
sha3_384: d23d351691bb1f3efda2f6a958d76c38c15f681682c5d0f6c0ba067e9d69ca007614c9933a2abd91305ad2bcc06b5615
ep_bytes: 9c543449cc3db0cec9dcb95f4b96d1e5
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.336445 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Lazy.336445
ClamAVWin.Packed.Razy-9785185-0
SkyhighBehavesLike.Win32.Dropper.wc
McAfeeTrojan-FVOQ!53449C78E7DF
MalwarebytesGeneric.Malware.AI.DDS
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
Cybereasonmalicious.03bfb9
ArcabitTrojan.Lazy.D5223D
BitDefenderThetaGen:NN.ZexaF.36680.m@Z@aGX3NXn
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Lazy.336445
NANO-AntivirusTrojan.Win32.PackedDownloader.ijxqni
AvastWin32:RATX-gen [Trj]
SophosTroj/Agent-BFEY
F-SecureHeuristic.HEUR/Patched.Ren
VIPREGen:Variant.Lazy.336445
EmsisoftGen:Variant.Lazy.336445 (B)
IkarusTrojan-Downloader.Win32.FakeAlert
JiangminTrojan.Copak.czdd
AviraHEUR/Patched.Ren
Antiy-AVLTrojan/Win32.Kryptik.gify
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
MicrosoftTrojan:Win32/Glupteba.MT!MTB
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataWin32.Trojan.PSE.11XGYE9
VaristW32/Trojan.ULNO-1867
AhnLab-V3Packed/Win.FJB.R623046
Acronissuspicious
VBA32Trojan.Copak
ALYacGen:Variant.Lazy.336445
TACHYONTrojan/W32.Selfmod
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.BF57 (CLASSIC)
YandexTrojan.Redcap!zbi6EFdgH7I
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:RATX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Lazy.336445?

Lazy.336445 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment