About “Lazy.7867 (B)” infection

The Lazy.7867 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.7867 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Lazy.7867 (B)?


File Info:
name: 67B51DABB0D9C741863B.mlw
path: /opt/CAPEv2/storage/binaries/85349f0b7f4c789d8dc6441310aedc68bd61f194e3fc518a9915d71d36386608
crc32: DB0AE5C7
md5: 67b51dabb0d9c741863b1611560a37bd
sha1: bf9e8500605ddfb14f745b020a5c6f66d20271f0
sha256: 85349f0b7f4c789d8dc6441310aedc68bd61f194e3fc518a9915d71d36386608
sha512: 7b701ebf61f808cba4197cdad25203af3c0f380aafee493a6c5d69f5d14b614a45ecb325dab2acec2d513af3773ac738ab85a3aad69029db3cc9e6eea62aacf5
ssdeep: 3072:iNjygUdJjQlRljKzsoooVI2nLD5Jy22dKqa7sU7Kqmxj:XgUdJj6WsoooVdLnT2dVkskFC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120F36C2035A88FA0D97977F9146AD5B207B23C117860F21E4CD278DB37B3F961EA4A07
sha3_384: c85288c9335bcde056f53df925b817af59854e0ac73fc53771fc841a1fe69828933307f5fe46794ae1b9fa103dddbc7e
ep_bytes: ff250020400000000000000000000000
timestamp: 2054-06-14 02:43:30

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: zBlmPicApiToL2Read
FileVersion: 1.0.0.0
InternalName: zBlmPicApiToL2Read.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: zBlmPicApiToL2Read.exe
ProductName: zBlmPicApiToL2Read
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Lazy.7867 (B) also known as:

FireEye	Gen:Variant.Lazy.7867
McAfee	Artemis!67B51DABB0D9
Malwarebytes	MachineLearning/Anomalous.95%
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Lazy.7867
MicroWorld-eScan	Gen:Variant.Lazy.7867
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Lazy.7867
Comodo	fls.noname@0
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Lazy.7867 (B)
GData	MSIL.Trojan.BSE.1M0A1XX
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.Generic.C4771394
ALYac	Gen:Variant.Lazy.7867
MAX	malware (ai score=81)
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Lazy.7867 (B)?

Lazy.7867 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X