About “Lazy.64611 (B)” infection

The Lazy.64611 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.64611 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Russian
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid

How to determine Lazy.64611 (B)?

File Info:
name: 6A62744A3F703683F75B.mlw
path: /opt/CAPEv2/storage/binaries/26356c7654797cb603103cfcde860fb0f8d21283f4be6839ab189cfd3d8a4a55
crc32: 8545248B
md5: 6a62744a3f703683f75b3b36146f577a
sha1: ddf52c2cd6905d78c9ea298b6a982530095576b9
sha256: 26356c7654797cb603103cfcde860fb0f8d21283f4be6839ab189cfd3d8a4a55
sha512: 6a47014bd5d40ba13716dd72bcb7bb406811d6994daa65ce7b83cbb4e81ed85904821087077b7ff874d01b835dea4ea937d458e46c4ab5585cfd70aaca74fd84
ssdeep: 98304:KsPghopAyZ4r8qnzavLtxBr5Ftor5Ftt:jPgTuY8OzQxF3ti3t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B7664AE16940D8D1D18D4A31D32119FE176B0C59EC8858BBC9A9BE283C763A1B3D85FF
sha3_384: 991dddd9558c6818f6925ed3f643984feb11337c8c451de0ba4316f1675c4292a4356e379224bd123a1d183cad21a2d4
ep_bytes: e856020000e97afeffff558becff7508
timestamp: 2021-12-01 14:24:05

Version Info:
CompanyName: AMS Software
FileDescription: ФотоДОКТОР
FileVersion: 3.15.0.1901
InternalName: FOTODOCTOR
LegalCopyright: © AMS Software 2003-2018
LegalTrademarks: 
OriginalFilename: FotoDoctor.exe
ProductName: ФотоДОКТОР
ProductVersion: 3.15
Comments: 
Translation: 0x0419 0x04e3

Lazy.64611 (B) also known as:

How to remove Lazy.64611 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.