About “Lazy.336445” infection

The Lazy.336445 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.336445 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.336445?

File Info:
name: 18A188B2278EF39D2375.mlw
path: /opt/CAPEv2/storage/binaries/9bf4f87ee03cd12c153217cb600666da07a70201cd2c248945bdba334fbcb55f
crc32: 1287E741
md5: 18a188b2278ef39d237509017608e966
sha1: e3df866a9c5ec19445893bff360bd5c2b2731249
sha256: 9bf4f87ee03cd12c153217cb600666da07a70201cd2c248945bdba334fbcb55f
sha512: 2c35b5bafc07ebb49eced4175419561defa9a9cea6beb858f10695f11f68c7b680a981156bdf7d76ab26816c15e8a3a4d2b9ca13a4e7bac40489216357987b02
ssdeep: 24576:NyoAOpG7O4Vye4fbuZDLgUl4aTBmgBXa/ZS1iT77Lv+f6T8Qnskb2i6OBKaBuL:NyoNpqO4VyekuZDLgONYgBgsiTbq4TTC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17465E00A97A51C43C0331772EC1C4BBB868B78FE66B7E72E788538A9756A3C5DD01724
sha3_384: d1fe6bca8aab4a5d81623dda275b642e5a423fa0687d087a5b085e2c322782bdc909016cc83812260ba3e7e18ca5800a
ep_bytes: 74051950246c9dd7218d9446a3c7fcfc
timestamp: 1971-05-16 00:00:00

Version Info:
0: [No Data]

Lazy.336445 also known as:

How to remove Lazy.336445?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.