Malware

Razy.940866 (file analysis)

Malware Removal

The Razy.940866 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.940866 virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

Related domains:

wpad.local-net

How to determine Razy.940866?


File Info:

name: 3D1AF03E3C745687C18F.mlw
path: /opt/CAPEv2/storage/binaries/7182a238dcfc136ab2ee29c82094cca3d1094b466fa23eafa314c9bd9557670c
crc32: 3CF49E3F
md5: 3d1af03e3c745687c18f34cf93c14de8
sha1: 81ef850542ab1f6164cf506b9ca15a7af698e277
sha256: 7182a238dcfc136ab2ee29c82094cca3d1094b466fa23eafa314c9bd9557670c
sha512: 7b7804079aff561a77b4fe5dfb46f22caf3cce1450ab10cb5e6cba340f8b60c1d29236eaceaac82246d9a1c2c59609aab615ba9520a1960241b4b01893339632
ssdeep: 3072:6SKou5IfoE1N5XcSR6E9J9Hwkz2aACAMfVxHsjqUwkMejsRkCdvR0FlgHIRXmUad:6PoGYoEv5XVR6SQi2dMQRcR0FZXpwqS9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T128547D067A91C4BAF1A382BD5936E7282B7A72320710C3C777144B9A6E311D1DB3F796
sha3_384: b2e0fda8d8532dd5f00bd01fd29850420b5b40916fef29339f8025aa0ed6e59fe99d747f4462635f01bea9bf7c08677c
ep_bytes: 3d3d3d443d483d4c3d503d793d9c3db9
timestamp: 2016-12-23 16:03:27

Version Info:

0: [No Data]

Razy.940866 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Razy.4!c
CynetMalicious (score: 100)
FireEyeGen:Variant.Razy.940866
McAfeeArtemis!3D1AF03E3C74
CylanceUnsafe
AlibabaTrojan:Win32/Shodi.2aaf27d7
CyrenW32/Shohdi.E.gen!Eldorado
ClamAVWin.Trojan.FuBu-1
BitDefenderGen:Variant.Razy.940866
MicroWorld-eScanGen:Variant.Razy.940866
AvastWin32:Shodi
Ad-AwareGen:Variant.Razy.940866
EmsisoftGen:Variant.Razy.940866 (B)
DrWebWin32.HLLP.Shohdi.61457
McAfee-GW-EditionArtemis!Trojan
SophosGeneric ML PUA (PUA)
GDataGen:Variant.Razy.940866
Antiy-AVLTrojan/Generic.ASCommon.208
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ALYacGen:Variant.Razy.940866
MAXmalware (ai score=80)
TrendMicro-HouseCallTROJ_GEN.R002H09KM21
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_99%
FortinetW64/Mikey.1304!tr
AVGWin32:Shodi

How to remove Razy.940866?

Razy.940866 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment