Malware

Lazy.444966 removal tips

Malware Removal

The Lazy.444966 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Lazy.444966 virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family

How to determine Lazy.444966?


File Info:

name: 1528AD49009ACF419F1C.mlw
path: /opt/CAPEv2/storage/binaries/ef657e54c8420ebf26cb79c1629793536fbcffc123c1e577e6dd5a4d5b91de0e
crc32: CD354683
md5: 1528ad49009acf419f1c0c6ae907295c
sha1: c3635dff0456fdf22f5f42af6a8595209da25ba8
sha256: ef657e54c8420ebf26cb79c1629793536fbcffc123c1e577e6dd5a4d5b91de0e
sha512: a2480807849ea4dce451be41d8ee19866f295b79df11e5d6aa728f175717966bff7d1fed9748230f1ff7db95f5a4124f72277c50070c5f6dccd19ecef216a3eb
ssdeep: 12288:W/kar1Vm4ZDh6lAWdlVe91W1BUAn1Mo7a:Or1VxN6lAWdlVe9YyV
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F9A4BE9F6908CBA1E8E71333C837F38FB6452204C69F424891657168CD2D5ECEABD667
sha3_384: 6501cef4a69b8337c5f33b863a70c6f2370bdf78d17c9efc9478c45b3240c0cecee321144648c7d49f6aae5867da09f1
ep_bytes: f7ee230ea787a789a266ae18b024c6a2
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Lazy.444966 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Lazy.444966
ClamAVWin.Packed.Dridex-9775371-1
SkyhighBehavesLike.Win32.RAHack.gc
McAfeeTrojan-FVOQ!1528AD49009A
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.444966
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005a45ef1 )
K7GWTrojan ( 005a45ef1 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGU
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGen:Variant.Lazy.444966
NANO-AntivirusTrojan.Win32.Selfmod.iuzoxq
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Copak.hac
TACHYONTrojan/W32.Selfmod
EmsisoftGen:Variant.Lazy.444966 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.PackedENT.123
ZillyaTrojan.KryptikAGen.Win32.52686
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.1528ad49009acf41
SophosTroj/Agent-BFEY
IkarusTrojan-Downloader.Win32.FakeAlert
GDataWin32.Trojan.PSE.1K2B8IF
JiangminTrojan.Selfmod.ckt
GoogleDetected
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Kryptik.girh
Kingsoftmalware.kb.a.999
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D6CA26
ZoneAlarmVHO:Trojan.Win32.Copak.gen
MicrosoftTrojan:Win32/Glupteba.MT!MTB
VaristW32/Trojan.NJGF-3047
AhnLab-V3Packed/Win.FJB.C5394144
Acronissuspicious
VBA32Trojan.Khalesi
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.229600906.susgen
FortinetW32/Kryptik.GIFQ!tr
BitDefenderThetaGen:NN.ZexaF.36744.E8Z@a4B08Bk
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Lazy.444966?

Lazy.444966 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment