How to remove “Lazy.9631”?

The Lazy.9631 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Lazy.9631 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Lazy.9631?


File Info:
crc32: 8FE3AC24
md5: 657b45557c71a6b847fe35dedb147af5
name: 657B45557C71A6B847FE35DEDB147AF5.mlw
sha1: 13a1253277aa64d49f27755acafc99d8928d15e6
sha256: ded4cb2c2dd2b1c06b2a18be429f5702b51b2ed4aaf8cccc188e62ae2b0e3899
sha512: 52517714e5f99e7082febb500da157d109d78235e7fa7e8e2ede02a9a417483ef429c0804673251143e5be75cc768f61b9a5cdaad522703d1dfed7360a7f02c0
ssdeep: 768:al4+8lzUwxbSr9Z9r4vbvUey7lMby7h49UzjVWz7vYehc:l+8lQCGr9Z9r4vbvUey7lMby7h49Uzjb
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: Exercise150917.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Exercise150917
ProductVersion: 1.0.0.0
FileDescription: Exercise150917
OriginalFilename: Exercise150917.exe

Lazy.9631 also known as:

K7AntiVirus	Trojan-Downloader ( 0058a5931 )
Lionic	Trojan.Win32.Lazy.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Steam.21858
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Lazy.9631
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/MalwareX.4d505fa6
K7GW	Trojan-Downloader ( 0058a5931 )
Cyren	W32/MSIL_Troj.BSS.gen!Eldorado
Symantec	MSIL.Packed.1
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JKY
APEX	Malicious
Avast	Win32:DangerousSig [Trj]
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
BitDefender	Gen:Variant.Lazy.9631
MicroWorld-eScan	Gen:Variant.Lazy.9631
Tencent	Msil.Trojan-downloader.Agent.Wogh
Ad-Aware	Gen:Variant.Lazy.9631
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.bm1@aOrC3in
TrendMicro	TROJ_GEN.R002C0WKF21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Lazy.9631
Emsisoft	Gen:Variant.Lazy.9631 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.PSW.MSIL.cuor
Avira	TR/Dldr.Agent.rlikw
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Gen:Variant.Lazy.9631
AhnLab-V3	Trojan/Win.MalwareX-gen.C4771122
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=88)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.PCrypt.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WKF21
Ikarus	Trojan.MSIL.Basic
Fortinet	MSIL/Agent.JKY!tr.dldr
AVG	Win32:DangerousSig [Trj]

How to remove Lazy.9631?

Lazy.9631 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X