Malware

Lazy.357831 removal instruction

Malware Removal

The Lazy.357831 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Lazy.357831 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Lazy.357831?



File Info:

name: F68FD71797B39C4807ED.mlw
path: /opt/CAPEv2/storage/binaries/2408a5fd26ded5c074233b5b9b6a78ecf16a0eb797ac48c8d6c961ce35fac24b
crc32: E420A271
md5: f68fd71797b39c4807ed9a56b6874ce3
sha1: 9c3c97932e529a60d3149b2ab751362d67e62773
sha256: 2408a5fd26ded5c074233b5b9b6a78ecf16a0eb797ac48c8d6c961ce35fac24b
sha512: c379a63a86ddd3ef677f5136e64fd68b8ba92d005cc39b25d5711751d2be5dba6b2d2a7b0d99559eca72d14043b382e8892ca1dad8af41f327c0338140426739
ssdeep: 3072:7yaDHXtkzG608p9qXxbEtqFOx2VBT2f8BwqLifgGljQTxHu9jVkQ5oWRQx2WR3xj:7rDHXtJlVwUWngHQyQdQB
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T132D35C12B5D04462DA321932F8A889658E7DFCE00F618D973F7846250FF16D1BAF4DEA
sha3_384: 198ab8117b91d68c48e7a06c783bcbc84f4dbbe0e7969b8c1ff762029aa0d0b8ff577a644e47ba8a461efaf260730443
ep_bytes: e8e2020000e974feffff558bec83ec0c
timestamp: 1970-01-01 00:00:00


Version Info:

Comments: This is a legitimate application.
CompanyName: Uganda National Oil Company
FileDescription: Uganda National Oil Company Product
FileVersion: 846
InternalName: EYILJmRZ8Ubw
LegalCopyright: © Uganda National Oil Company All rights reserved.
LegalTrademarks: © Uganda National Oil Company Trademarks
OriginalFilename: aVg7g2Sc.exe
ProductName: QTEANZjp7p
ProductVersion: 846
Translation: 0x0407 0x04b0

Lazy.357831 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanGen:Variant.Lazy.357831
FireEyeGeneric.mg.f68fd71797b39c48
CAT-QuickHealTrojan.GenericPMF.S30358666
ALYacGen:Variant.Lazy.357831
Cylanceunsafe
ZillyaTrojan.Injurer.Win32.4035
SangforTrojan.Win32.Kryptik.V2u4
K7AntiVirusTrojan ( 005a79e41 )
AlibabaTrojan:Win32/GenKryptik.e2ecf973
K7GWTrojan ( 005a79e41 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.36348.iq2@aynOk9di
CyrenW32/Kryptik.KCI.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HTYZ
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Injurer.gen
BitDefenderGen:Variant.Lazy.357831
NANO-AntivirusTrojan.Win32.Injurer.jxgmza
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.10bf01e2
SophosTroj/Krypt-AAT
F-SecureTrojan.TR/Kryptik.ujxje
DrWebTrojan.PWS.RedLineNET.7
VIPREGen:Variant.Lazy.357831
TrendMicroTROJ_GEN.R002C0DGB23
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Lazy.357831 (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.1ENI62
JiangminTrojan.Injurer.c
AviraTR/Kryptik.ujxje
Antiy-AVLTrojan/Win32.GenKryptik
ArcabitTrojan.Lazy.D575C7
ZoneAlarmHEUR:Trojan.Win32.Injurer.gen
MicrosoftTrojan:Win32/Amadey.AD!MTB
GoogleDetected
AhnLab-V3Trojan/Win.RedLine.R589295
McAfeeGenericRXWF-LY!F68FD71797B3
MAXmalware (ai score=82)
VBA32BScope.Backdoor.Agent
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DGB23
RisingTrojan.Kryptik!1.E841 (CLASSIC)
IkarusTrojan.Win32.Redline
MaxSecureTrojan.W32.Injurer.gen
FortinetW32/GenKryptik.GLIH!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Lazy.357831?

Lazy.357831 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment