Lazy.379826 removal

The Lazy.379826 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.379826 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Lazy.379826?


File Info:
name: AEDA4A54825ED7882FA1.mlw
path: /opt/CAPEv2/storage/binaries/4da2b8fb52cd0742bacb1fc630f43f33938db19651354679441757ecc5df4504
crc32: 1AEE1227
md5: aeda4a54825ed7882fa185dedf0c7c46
sha1: 76faeb7ec7d85cc0bd17f26a34ee5c5c8cc58a03
sha256: 4da2b8fb52cd0742bacb1fc630f43f33938db19651354679441757ecc5df4504
sha512: 28aed717450673b1b4fa6d4cc4b65235e0dd1e7650bcdc3216d3832c5dfae68e94b3e60f6971b4e25605a8c78f423502b882781f0f1adb76e6a4d99370ec838e
ssdeep: 3072:BR8dz8927ftgSy4NAVRNdCHraHleERx3eERxMhJA2Nr4UkkZUPegSEdmvstgeY2e:MiEgSywu4+HleEn3eEnKstgklhloS3a
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T137D40C01E3E49404EDF6BAF4A9B1827039F1BC265D31823E654C767E2BF2B039925767
sha3_384: 9aae539dfd32d768ab049f95862df860c2fd57467282d64aff5903fa7e3f49e053625ab03b70524cbf341b8b5d9bbc91
ep_bytes: 60be00804f008dbe0090f0ff5789e58d
timestamp: 2011-07-19 00:10:11

Version Info:
CompanyName: BitTorrent, Inc.
FileDescription: µTorrent
FileVersion: 3.0.0.25460
InternalName: uTorrent.exe
OriginalFilename: uTorrent.exe
LegalCopyright: ©2011 BitTorrent, Inc. All Rights Reserved.
ProductName: µTorrent
ProductVersion: 3.0.0.25460
Translation: 0x0409 0x04e4

Lazy.379826 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Malware-gen
MicroWorld-eScan	Gen:Variant.Lazy.379826
FireEye	Generic.mg.aeda4a54825ed788
Skyhigh	BehavesLike.Win32.Generic.jz
McAfee	Artemis!AEDA4A54825E
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZexaF.36802.Mm0@aq8P0KeO
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Lazy.379826
Rising	Downloader.Rakhni!8.1CEF (TFE:1:i5zF6NbKexB)
Emsisoft	Gen:Variant.Lazy.379826 (B)
VIPRE	Gen:Variant.Lazy.379826
Ikarus	PUA.Toolbar.Conduit
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	Trojan.Lazy.D5CBB2
GData	Gen:Variant.Lazy.379826
Acronis	suspicious
ALYac	Gen:Variant.Lazy.379826
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CDJ24
MAX	malware (ai score=89)
Fortinet	W32/ULPM.16C0!tr
DeepInstinct	MALICIOUS

How to remove Lazy.379826?

Lazy.379826 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X