What is “Razy.168914”?

The Razy.168914 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.168914 virus can do?

Possible date expiration check, exits too soon after checking local time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.168914?


File Info:
crc32: 0A381D03
md5: a2b844d4c71c80780c4fd02a2c75326c
name: A2B844D4C71C80780C4FD02A2C75326C.mlw
sha1: c360dae09d1b60a1f6f04b5a51c2ec2f6b3c7d4f
sha256: d562a2fa5aac8d5533c41f5770125e5d11dcfdc9b5c7228d958acaa0d334c631
sha512: ce92ec4983b3159968a4525f98f2c07217489a4101403a6c0f8b49d9c609fc08a721a56bc542cb1556fe104e6d6e0910527faf17e2f05398a3855b606f748ad4
ssdeep: 3072:6+OLS3Mc1mEiHEGAm0aSjpC+zHzAFS5q9C4fbvs1B4WEKW8+:61cRd3akpC+TEFNChBZEKW8+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: TaskEng
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: Task Scheduler Engine
OriginalFilename: taskeng.exe
Translation: 0x0409 0x04b0

Razy.168914 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.168914
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.4c71c8
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Crypt-KOW [Trj]
BitDefender	Gen:Variant.Razy.168914
MicroWorld-eScan	Gen:Variant.Razy.168914
Tencent	Win32.Trojan.Patched.Lmkm
Ad-Aware	Gen:Variant.Razy.168914
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34142.nq2@aaQzjKci
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Virut.dh
FireEye	Generic.mg.a2b844d4c71c8078
Emsisoft	Gen:Variant.Razy.168914 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.168914
TACHYON	Trojan/W32.PornoBlocker.219648.B
McAfee	Artemis!A2B844D4C71C
MAX	malware (ai score=98)
AVG	Win32:Crypt-KOW [Trj]
Paloalto	generic.ml

How to remove Razy.168914?

Razy.168914 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X