About “Lazy.82104 (B)” infection

The Lazy.82104 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.82104 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Lazy.82104 (B)?


File Info:
name: 63FAFE0F0478763B8B4F.mlw
path: /opt/CAPEv2/storage/binaries/4441e9a8082c84d44df7707ad9deb6bd6682a9df9f47864d9499f1aa2c0f7493
crc32: D522A4CF
md5: 63fafe0f0478763b8b4f6243311db648
sha1: 29a2bef4c3c4d0859caa196163a97358325a2826
sha256: 4441e9a8082c84d44df7707ad9deb6bd6682a9df9f47864d9499f1aa2c0f7493
sha512: 7e47dfdaab770eb30f4331524f30ddcc9bc4f0d3e21a266eda7e8236be8f22867eae5711a7b6d6d34fe56b248a91a6b59bb032f90c43185520d23e756d1a6e59
ssdeep: 12288:/TYQeONjgmnoIF2dnZ0Ot6xA0pzbK1KdYVjpOVgNxbkI:/TYQeMhbF2dZXIBzwKdYVjp17
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T14F154A51B7F880A5E0B7967A99B2D327E671BC105B74C6CF0240B66E5F33AD08936732
sha3_384: 2adb57f8fd08979ad1d3173776f0543972ea6804a11b523dfcea4f243ff82815ee9ea45ae5ac4d2a29d3a3e6da0a93c7
ep_bytes: 4883ec28e8670800004883c428e9f6fd
timestamp: 2021-02-19 13:48:07

Version Info:
0: [No Data]

Lazy.82104 (B) also known as:

MicroWorld-eScan	Gen:Variant.Lazy.82104
FireEye	Gen:Variant.Lazy.82104
ALYac	Gen:Variant.Lazy.82104
Cylance	Unsafe
Alibaba	Trojan:Application/Autoruner.74deb618
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	Trojan.Lazy.D140B8
Cyren	W64/Shohdi.C.gen!Eldorado
BitDefender	Gen:Variant.Lazy.82104
Ad-Aware	Gen:Variant.Lazy.82104
Emsisoft	Gen:Variant.Lazy.82104 (B)
McAfee-GW-Edition	BehavesLike.Win64.Generic.ch
Ikarus	Trojan.Autoruner
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win64.Generic
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Lazy.82104
Cynet	Malicious (score: 100)
McAfee	RDN/Generic.dx
TrendMicro-HouseCall	TROJ_GEN.R002H06LC21
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_90%
Fortinet	W64/Razy.9701I!tr

How to remove Lazy.82104 (B)?

Lazy.82104 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X