Should I remove “Lazy.41486 (B)”?

The Lazy.41486 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.41486 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Lazy.41486 (B)?


File Info:
name: 1654E21FCD3F50C13CA8.mlw
path: /opt/CAPEv2/storage/binaries/df35313df71dcfb9c71a66b5878ebc9e5d039dff4e3c2cdcab648e8de299fb99
crc32: F0B97AC4
md5: 1654e21fcd3f50c13ca8e7e9d6df1baa
sha1: d511808ea565b692e8862504d21e1ee0c11c891d
sha256: df35313df71dcfb9c71a66b5878ebc9e5d039dff4e3c2cdcab648e8de299fb99
sha512: 36dc4a66523c3d85e9a88d6ab2ab4ffeb4ed7803d4259ab045fd6e55b79e12b91e8180eb11998242c2cc2d6a98a2546f47ad45f013cb228f0e19cffd290aa37c
ssdeep: 98304:b4xxdfp+CFyR9cDNfNCIFILWmFBiXGWaXdoBXuV/eyWa:Exgh9cxfNComviXOdoEV/X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9F533218FAE064EE1FE4B7F346A4B15D0B3658D4851DECF488E12D289B97958238F1F
sha3_384: 436d006a07d9289f0cfcc3ec5486dbab500392993abd98d22b5e80c846b9ede0667536132566e49fd35523a26f19c50c
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 09:37:15

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 174IPS-Simulator.StartTool
FileVersion: 0.0.0.0
InternalName: 174IPS-Simulator.StartTool.exe
LegalCopyright: Copyright © 2015-2019
LegalTrademarks: 
OriginalFilename: 174IPS-Simulator.StartTool.exe
ProductName: 174IPS-Simulator
ProductVersion: 1.0.0.e7ca35
Assembly Version: 0.0.0.0

Lazy.41486 (B) also known as:

FireEye	Gen:Variant.Lazy.41486
McAfee	GenericRXQX-RM!1654E21FCD3F
APEX	Malicious
BitDefender	Gen:Variant.Lazy.41486
MicroWorld-eScan	Gen:Variant.Lazy.41486
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Lazy.41486
Emsisoft	Gen:Variant.Lazy.41486 (B)
McAfee-GW-Edition	GenericRXQX-RM!1654E21FCD3F
GData	Gen:Variant.Lazy.41486
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.RM.C4817094
Malwarebytes	Malware.AI.3788566424
Ikarus	Trojan.Crypt
AVG	Win32:TrojanX-gen [Trj]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Lazy.41486 (B)?

Lazy.41486 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X