How to remove “Lazy.467600”?

The Lazy.467600 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.467600 virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Lazy.467600?


File Info:
name: 44E8280B8178874A8A5B.mlw
path: /opt/CAPEv2/storage/binaries/0f78bcd06d139377872058cb82796f8a28e74d32a6f72fd7cf68018e0e92d7ff
crc32: 72488B0B
md5: 44e8280b8178874a8a5b7c4c2de33fed
sha1: bd3a17c4d7d472814a622f35ac564a3830d476af
sha256: 0f78bcd06d139377872058cb82796f8a28e74d32a6f72fd7cf68018e0e92d7ff
sha512: edf997614a0c10699881a0d0125a34c8714654994ee4b607fb13dafc6409afacd375e7336c5f811e830188996bb73405f672cc02ac2abafec95885871346cfef
ssdeep: 768:6FZPT17XOB4MuGk1p6gLj30Ri32kC3qu4SkZHa73kdkiv/DkaXPVUR71xK8e:6F7OB4MGogLj30Ri32kC3qu4SkZykdbJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AF13F61963EE8722C9AD677A4035932907F1D916F753EB7E6DE4B0F698B33008F82614
sha3_384: 95752499971178d27ce3fc334fa04ec6dbf9c60791b065b6e084f9d6b9648fb083c2c70167bda0624a3851d0dd86c750
ep_bytes: ff250020400000000000000000000000
timestamp: 2013-04-27 18:22:23

Version Info:
Translation: 0x0000 0x04b0
FileDescription: CHPHW9_3Q10
FileVersion: 1.0.0.0
InternalName: CHPHW9_3Q10.exe
LegalCopyright: Copyright ©  2013
OriginalFilename: CHPHW9_3Q10.exe
ProductName: CHPHW9_3Q10
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.467600 also known as:

Bkav	W32.AIDetectMalware.CS
MicroWorld-eScan	Gen:Variant.Lazy.467600
FireEye	Gen:Variant.Lazy.467600
ALYac	Gen:Variant.Lazy.467600
Arcabit	Trojan.Lazy.D72290
APEX	Malicious
Kaspersky	VHO:Backdoor.MSIL.Convagent.gen
BitDefender	Gen:Variant.Lazy.467600
Avast	Win32:BackdoorX-gen [Trj]
Emsisoft	Gen:Variant.Lazy.467600 (B)
VIPRE	Gen:Variant.Lazy.467600
ZoneAlarm	VHO:Backdoor.MSIL.Convagent.gen
GData	Gen:Variant.Lazy.467600
MAX	malware (ai score=80)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:BackdoorX-gen [Trj]

How to remove Lazy.467600?

Lazy.467600 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X