Malware

Razy.101302 information

Malware Removal

The Razy.101302 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.101302 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Razy.101302?


File Info:

crc32: C53B8D71
md5: 91a10037d5f7e1ecb4df442a2dd11686
name: 91A10037D5F7E1ECB4DF442A2DD11686.mlw
sha1: 51402863a2747c6bf04416df24af318b79cec4d6
sha256: 99b286aca34be933940d18185db35031ba4ca84c9f2dc7bc56ea0f8c700b66db
sha512: e53e1af6f843e5ebe621254aecd63b7e0a35f4b1555567ef3b08284d28ca1ae774f1a37541c4de924486547f79e4ed2e1e626730d23e603daa017c8a5879f524
ssdeep: 3072:bJp7SOQBBc22hf6/tRBORJqejC5mAyTg//K0pbj/Fg+RLkFC4fTQcHVGt:YBBcL6lRwXVjTG/yWj/i+RLk0gEsG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Malwarebytes. All rights reserved.
InternalName: mbamservice.exe
FileVersion: 3.2.21.0
CompanyName: Malwarebytes
LegalTrademarks:
ProductName: Malwarebytes Anti-Malware
ProductVersion: 3.2.21.0
FileDescription: Malwarebytes Anti-Malware
OriginalFilename: mbamservice.exe
Translation: 0x0409 0x04e4

Razy.101302 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusPassword-Stealer ( 004cd4f51 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Papras.2166
ALYacGen:Variant.Razy.101302
MalwarebytesTrojan.PasswordStealer
ZillyaTrojan.Papras.Win32.5913
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanPSW:Win32/Papras.64923a99
K7GWPassword-Stealer ( 004cd4f51 )
Cybereasonmalicious.7d5f7e
SymantecTrojan.Snifula.F
ESET-NOD32Win32/PSW.Papras.EJ
ZonerTrojan.Win32.46040
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Bublik.gen
BitDefenderGen:Variant.Razy.101302
NANO-AntivirusTrojan.Win32.Papras.fefslq
MicroWorld-eScanGen:Variant.Razy.101302
TencentWin32.Trojan.Razy.Hsrx
Ad-AwareGen:Variant.Razy.101302
SophosMal/Generic-S
ComodoMalware@#262qz6nlrbq0e
BitDefenderThetaGen:NN.ZexaF.34688.mG0@aWsxn1bi
McAfee-GW-EditionBehavesLike.Win32.Ransomware.dc
FireEyeGeneric.mg.91a10037d5f7e1ec
EmsisoftGen:Variant.Razy.101302 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.djans
WebrootW32.Trojan.Gen
eGambitUnsafe.AI_Score_100%
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Razy.101302
TACHYONBackdoor/W32.Vawtrak.205824
AhnLab-V3Trojan/Win32.Vawtrak.C1611870
Acronissuspicious
McAfeeGenericRXAA-FA!91A10037D5F7
MAXmalware (ai score=100)
PandaTrj/Genetic.gen
RisingStealer.Papras!8.132 (TFE:dGZlOgISRGQp/LQ9Nw)
YandexTrojan.GenAsa!AC7OmaRRSGE
IkarusTrojan.Win32.PSW
FortinetW32/Generic.AC.397FEA!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Razy.101302?

Razy.101302 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment