About “Lazy.486533” infection

The Lazy.486533 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.486533 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Lazy.486533?


File Info:
name: E9C464E19762C600000B.mlw
path: /opt/CAPEv2/storage/binaries/463261eb06e7f23edc307666cd047ee07d7f23749a7e4e61da3a5498fe54561b
crc32: 74C5F6E9
md5: e9c464e19762c600000b8cb9d2960e4b
sha1: ae53f6e9a4ebf77ec062e736207f652f0ecc4cd1
sha256: 463261eb06e7f23edc307666cd047ee07d7f23749a7e4e61da3a5498fe54561b
sha512: 94923dd116da933d1423c5be24439c057f3d1f14b15aa2384754d8d1f1f2095bbda216cba65f8ad496141f1b717a9030ac476ceb6187b1491999cd49f378991e
ssdeep: 12288:O9BVcUM3XDZd8yRA9oghtGgkrJW1uUIeKW6lZfzV6pgRkeZWuuY:O9wz3TjZALhQgk1WIUVufzgpwWuR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FCD40245D2500D9AC04F07BC35DB4B109FB7864752C2CF1D6EAD704FAE127B66E60AAB
sha3_384: 046d0625c5815141ae15895ed127f50da930d7fdb0984ca0bcd829625280d8657510fb4bc26cae87f751b175915d15a9
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-08-22 09:18:13

Version Info:
Translation: 0x0000 0x04b0
CompanyName: 微软中国
FileDescription: NuomiMovieTicket
FileVersion: 1.4.1.0
InternalName: NuomiMovieTicket.exe
LegalCopyright: Copyright © 微软中国 2013
OriginalFilename: NuomiMovieTicket.exe
ProductName: NuomiMovieTicket
ProductVersion: 1.4.1.0
Assembly Version: 1.4.1.0

Lazy.486533 also known as:

Bkav	W32.AIDetectMalware.CS
MicroWorld-eScan	Gen:Variant.Lazy.486533
FireEye	Gen:Variant.Lazy.486533
Skyhigh	Artemis
McAfee	Artemis!E9C464E19762
BitDefender	Gen:Variant.Lazy.486533
VIPRE	Gen:Variant.Lazy.486533
Emsisoft	Gen:Variant.Lazy.486533 (B)
GData	Gen:Variant.Lazy.486533
Antiy-AVL	GrayWare/Win32.Wacapew
Arcabit	Trojan.Lazy.D76C85
ALYac	Gen:Variant.Lazy.486533
MAX	malware (ai score=82)
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09BS24
MaxSecure	Trojan.Malware.300983.susgen

How to remove Lazy.486533?

Lazy.486533 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X