Should I remove “Lazy.83214”?

The Lazy.83214 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.83214 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.83214?


File Info:
name: 6D65D505E30ECFDE5C4A.mlw
path: /opt/CAPEv2/storage/binaries/e8d8afa37736bc69deb2062b7e2c4c8754ca626999bbce746dcf5487d7a70534
crc32: 49C357C2
md5: 6d65d505e30ecfde5c4a7a2bd0b2122a
sha1: 6e1a109156120fd5a03f024cada6fafcc014f74e
sha256: e8d8afa37736bc69deb2062b7e2c4c8754ca626999bbce746dcf5487d7a70534
sha512: f1c1a99d43293521173445f9f6424da26a6781f5fe2fbc3c8a5914f517da18f394484dad468b15bcaa7df30621630377d54c09d6907e90312ab186654fb1b545
ssdeep: 98304:fMMFQiybKEEQv4cl6nat0WxwsX+aRqsscz5Q9eT:nCl6nG0GJmeT
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E4467C23B70AD532D0AD02B1642E6BB6946C7A36537444C7F7A00F66BAE10E37A35F17
sha3_384: 444f3fb71fac8c3aa82e3c519544d28be316a6f474c174db63032371023be8f44338827c9f99a7ac5914a4e48be1df95
ep_bytes: 558bec837d0c017505e8680f0000ff75
timestamp: 2021-09-22 09:16:11

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 
LegalCopyright: 
InternalName: 
ProductName: 
ProductVersion: 1.8.0.40
Translation: 0x0804 0x04b0

Lazy.83214 also known as:

Bkav	W32.Common.497CC4E2
Lionic	Adware.Win32.AdwareX.2!c
MicroWorld-eScan	Gen:Variant.Lazy.83214
FireEye	Gen:Variant.Lazy.83214
Skyhigh	Artemis!PUP
ALYac	Gen:Variant.Lazy.83214
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (D)
Alibaba	AdWare:Win32/AdwareX.8a57b71d
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.Agent.NUF
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Lazy.83214
Avast	Win32:AdwareX-gen [Adw]
Tencent	Malware.Win32.Gencirc.11baedf0
Emsisoft	Gen:Variant.Lazy.83214 (B)
F-Secure	Adware.ADWARE/Agent.iyaur
VIPRE	Gen:Variant.Lazy.83214
Sophos	Generic Reputation PUA (PUA)
GData	Gen:Variant.Lazy.83214
Avira	ADWARE/Agent.iyaur
Antiy-AVL	GrayWare[AdWare]/Win32.Agent
Arcabit	Trojan.Lazy.D1450E
Microsoft	Program:Win32/Wacapew.C!ml
McAfee	Artemis!6D65D505E30E
MAX	malware (ai score=85)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H09KU21
Rising	Adware.CrxInstall!1.E21B (CLASSIC)
MaxSecure	Trojan.Malware.138710320.susgen
Fortinet	Riskware/Agent
BitDefenderTheta	Gen:NN.ZedlaF.36744.@x8@aCAFyGkj
AVG	Win32:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Lazy.83214?

Lazy.83214 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X