Adware.Razy.658355 (B) malicious file

The Adware.Razy.658355 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Razy.658355 (B) virus can do?

Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Adware.Razy.658355 (B)?


File Info:
name: E2665EE5A90A580AD68A.mlw
path: /opt/CAPEv2/storage/binaries/4ef006ed91e20b9a261eee7a10fbd5e093d3db279708a3e2d66235fdbc143b74
crc32: 85009C6B
md5: e2665ee5a90a580ad68ab41566f5329a
sha1: c520aca03b13d0eface5e6bdeb6e81abfaa36973
sha256: 4ef006ed91e20b9a261eee7a10fbd5e093d3db279708a3e2d66235fdbc143b74
sha512: 39dc4e2191b2aa0883dc14971599b2ae8c5e0633a912fffb5eb7755c77a48ad0a6cc4939dc3e7906b0a09b6dcae792838e7247c0bd29e3a2202e77d0bb4fbcfa
ssdeep: 12288:9iu5Fx/DxV7rD0KImt0LDTdB3IbmBEy1DHQy5fJ1GLk2mCiu5Fx/DxV7rD0KImt6:9xzfadB3IbmBt1DHQy5Sk2txzfadB3I2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T147457B34BA55C436C3BB0DB11F78E726543DB9610BA512C7E3E89EAD59B02C16333A27
sha3_384: 541db34d38f47c3d386131c8340151507c5d2678b9eeba820b54eabb93810294b57c425e0e0d8cad626f2119a6c0d644
ep_bytes: e8be920000e97ffeffff558bec8b4514
timestamp: 2017-11-15 23:40:25

Version Info:
CompanyName: Microsoft Corporation
FileDescription: appvlp
InternalName: appvlp
LegalCopyright: © 2015 Microsoft Corporation. All rights reserved.
LegalTrademarks: Microsoft® is a registered trademark of Microsoft Corporation.
OriginalFilename: appvlp.exe
ProductName: Microsoft Application Virtualization (App-V)
FileVersion: 5.1.131.0
ProductVersion: 5.1.131.0
PrivateBuild: RTM (by sftbuild on MBAMR01BLD02)
Translation: 0x0409 0x04b0

Adware.Razy.658355 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
MicroWorld-eScan	Gen:Variant.Adware.Razy.658355
FireEye	Generic.mg.e2665ee5a90a580a
McAfee	Artemis!E2665EE5A90A
Cybereason	malicious.5a90a5
BitDefenderTheta	AI:Packer.DCFA27A81E
Cyren	W32/Mikey.BH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R03BH0CE122
ClamAV	Win.Malware.Dqan-9886402-0
BitDefender	Gen:Variant.Adware.Razy.658355
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Adware.Razy.658355 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1201262
MAX	malware (ai score=87)
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE2.10UGGIB
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	Trojan.Sabsik
ALYac	Gen:Variant.Adware.Razy.658355
Rising	Trojan.Kryptik!1.B239 (CLASSIC)
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Mabezat.0DC2!tr
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/grayware_confidence_70% (W)

How to remove Adware.Razy.658355 (B)?

Adware.Razy.658355 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X