Categories: Malware

Razy.164087 removal guide

The Razy.164087 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.164087 virus can do?

  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz
egolds.000webhostapp.com

How to determine Razy.164087?


File Info:

crc32: 95A857D2md5: 95332e2321a1dac3575e32656fa66e8ename: 7.exesha1: 11b68a92f4d10437e5dcf271f6d67848b56d2033sha256: c8079d23a6c5c1758b13d807ecd9674e28d7374a68c1d8efea25920c29ccf3d5sha512: adac2df473c839eaf7492bf1b7cfc11d0bcdc2c210ff97f1bc7ffb33c7b265ad7233814fd6a9f4ea3a25fd24ea888f6c0a083f9f9c6c0c9c84dad1b39c70e5b0ssdeep: 192:w9YMLZFfIoyExxyClFvPNy9apZwQUJQUhpGzTUZp:w+OD0ExxyWFvly9apZwQUbhpGzT0type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Assembly Version: 1.2.3.4InternalName: 7.exeFileVersion: 1.2.3.4ProductVersion: 1.2.3.4FileDescription: OriginalFilename: 7.exe

Razy.164087 also known as:

MicroWorld-eScan Gen:Variant.Razy.164087
FireEye Generic.mg.95332e2321a1dac3
McAfee GenericRXBP-HI!95332E2321A1
VIPRE Trojan.Win32.Generic!BT
K7AntiVirus Trojan-Downloader ( 005044871 )
BitDefender Gen:Variant.Razy.164087
K7GW Trojan-Downloader ( 005044871 )
Cybereason malicious.321a1d
Symantec ML.Attribute.HighConfidence
APEX Malicious
Paloalto generic.ml
GData Gen:Variant.Razy.164087
Kaspersky HEUR:Trojan.Win32.Generic
Alibaba TrojanDownloader:MSIL/Gendwnurl.9b930a32
NANO-Antivirus Trojan.Win32.Steam.erwcni
AegisLab Trojan.Win32.Generic.4!c
Tencent Msil.Trojan-downloader.Agent.Hrol
Ad-Aware Gen:Variant.Razy.164087
Sophos Mal/Generic-S
Comodo TrojWare.MSIL.Dynamer.CXG@7h7ru8
F-Secure Trojan.TR/ATRAPS.Gen
DrWeb Trojan.PWS.Steam.13806
Invincea heuristic
McAfee-GW-Edition GenericRXBP-HI!95332E2321A1
Trapmine malicious.high.ml.score
Emsisoft Gen:Variant.Razy.164087 (B)
Ikarus Trojan-Downloader.MSIL.Agent
Jiangmin Trojan.Generic.bahjz
Webroot W32.Malware.Gen
Avira TR/ATRAPS.Gen
MAX malware (ai score=81)
Antiy-AVL Trojan/Win32.AGeneric
Endgame malicious (high confidence)
Arcabit Trojan.Razy.D280F7
ZoneAlarm HEUR:Trojan.Win32.Generic
Microsoft TrojanDownloader:MSIL/Gendwnurl.BD!bit
Acronis suspicious
ALYac Gen:Variant.Razy.164087
Cylance Unsafe
Panda Trj/GdSda.A
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.CXG
Yandex Trojan.Agent!72BqkFWe/MA
SentinelOne DFI – Malicious PE
Fortinet MSIL/Generic.AP.775754!tr
AVG Win32:Malware-gen
Avast Win32:Malware-gen
CrowdStrike win/malicious_confidence_100% (D)
Qihoo-360 Win32/Trojan.67d

How to remove Razy.164087?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

About “Malware.AI.4109823579” infection

The Malware.AI.4109823579 is considered dangerous by lots of security experts. When this infection is active,…

5 mins ago

About “PUA:Win32/IminentToolbar” infection

The PUA:Win32/IminentToolbar is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Malware.AI.1686126144 removal guide

The Malware.AI.1686126144 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Malware.AI.3672090432 information

The Malware.AI.3672090432 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Should I remove “Malware.AI.4241069872”?

The Malware.AI.4241069872 is considered dangerous by lots of security experts. When this infection is active,…

21 mins ago

Trojan:Win32/Remcos!pz (file analysis)

The Trojan:Win32/Remcos!pz is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago