Malware

How to remove “Razy.184420”?

Malware Removal

The Razy.184420 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.184420 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Razy.184420?


File Info:

crc32: C5FC90C0
md5: 0734b4d9fb74cde7e2588f21331c789c
name: 0734B4D9FB74CDE7E2588F21331C789C.mlw
sha1: fb1c77c5100166a82777bea1f9788a672abb7672
sha256: 5fec3608f4b3f7366b5bf440a8aa39dab58be33dad30a86ff20237f166cdc816
sha512: b79ac78e1b4c3281325561904bb5871e5e9e39d97ff1b9bfddf839e9a52c0f8e5b40bab191e1187e91c3b96640edc2057d17fafae566d4ab37e2d36876c4939f
ssdeep: 3072:QEQSJxcdf8CNFxIJ55N5IhkOcxtjNx2ImRHZJ4pb9FfXHSG+AUt0RV3rlBp98Yh:QEQSvcJ8CGJ55Ngfcb2MbrXwcwYh5L
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Razy.184420 also known as:

K7AntiVirusTrojan ( 700000121 )
Elasticmalicious (high confidence)
DrWebBackDoor.Bladabindi.3463
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.184420
CylanceUnsafe
ZillyaTrojan.Bladabindi.Win32.100570
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaBackdoor:MSIL/Bladabindi.f4414c46
K7GWTrojan ( 700000121 )
Cybereasonmalicious.9fb74c
BaiduMSIL.Backdoor.Bladabindi.a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Bladabindi.AQ
APEXMalicious
AvastWin32:KeyloggerX-gen [Trj]
ClamAVWin.Packed.Bladabindi-7086597-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.184420
NANO-AntivirusTrojan.Win32.Bladabindi.febhxa
MicroWorld-eScanGen:Variant.Razy.184420
TencentWin32.Trojan.Spy.Duq
Ad-AwareGen:Variant.Razy.184420
SophosMal/Generic-R + Troj/Bbindi-W
ComodoMalware@#2rg4yahky5p8d
BitDefenderThetaGen:NN.ZemsilF.34266.rmW@aSaGtie
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.dm
FireEyeGeneric.mg.0734b4d9fb74cde7
EmsisoftGen:Variant.Razy.184420 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dbqgy
AviraTR/Spy.Gen8
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.269DE46
MicrosoftBackdoor:MSIL/Bladabindi.AL
ArcabitTrojan.Razy.D2D064
GDataGen:Variant.Razy.184420
AhnLab-V3Trojan/Win32.Dapato.C899487
Acronissuspicious
McAfeeBackDoor-FDNN!0734B4D9FB74
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
RisingBackdoor.Njrat!1.9E49 (CLASSIC)
YandexTrojan.Agent!qxu4r6ORg2M
IkarusTrojan.MSIL.Bladabindi
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Bbindi.W!tr
AVGWin32:KeyloggerX-gen [Trj]
Paloaltogeneric.ml

How to remove Razy.184420?

Razy.184420 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment