Malware

Razy.256080 information

Malware Removal

The Razy.256080 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.256080 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Razy.256080?


File Info:

crc32: AD25C182
md5: 509ff774bf848d33283ce33f7393abf2
name: 509FF774BF848D33283CE33F7393ABF2.mlw
sha1: 389efaa21d340f5d29be85f6806cb4327b76e26e
sha256: 158f7474259f0a19f219f2a82d8dddc458e0db50d6d65c345205c9b12bf0a358
sha512: c6d8c250c67880efea68852227d71bb6857cfad83388089622390c610bab89734fe3dc88ba4eb2719e097dccc04a883c3ca9a2fb279de8add1fb1739de84d59f
ssdeep: 24576:z3WqDDeLNFZqetL8NFZqe5OhNxKQoh14qm:a9LPZqe98PZqeGKz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright CC xa92017 .
Assembly Version: 1.3.2.2
InternalName: Haheiilx.exe
FileVersion: 1.3.2.2
CompanyName: present ltd
LegalTrademarks: present
Comments: present
ProductName: present Client
ProductVersion: 1.3.2.2
FileDescription: present
OriginalFilename: Haheiilx.exe

Razy.256080 also known as:

K7AntiVirusAdware ( 005465501 )
LionicRiskware.Win32.Generic.1!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.35582
CAT-QuickHealPUA.CloudguardFC.S20327803
ALYacGen:Variant.Razy.256080
CylanceUnsafe
ZillyaAdware.CloudGuard.Win32.3538
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWAdware ( 005465501 )
Cybereasonmalicious.4bf848
CyrenW32/S-7699eab4!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Adware.CloudGuard.D
APEXMalicious
AvastWin32:Adware-gen [Adw]
BitDefenderGen:Variant.Razy.256080
NANO-AntivirusTrojan.Win32.CloudGuard.exwrys
MicroWorld-eScanGen:Variant.Razy.256080
TencentMalware.Win32.Gencirc.114cedce
Ad-AwareGen:Variant.Razy.256080
SophosCloudGuard (PUA)
BitDefenderThetaGen:NN.ZemsilF.34170.tn0@aWr2UIj
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionPUP-XDW-PK
FireEyeGeneric.mg.509ff774bf848d33
EmsisoftGen:Variant.Razy.256080 (B)
SentinelOneStatic AI – Malicious PE
AviraADWARE/CloudGuard.Gen
Antiy-AVLTrojan/Generic.ASMalwS.24FC29F
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitTrojan.Razy.D3E850
SUPERAntiSpywareAdware.CloudGuard/Variant
GDataGen:Variant.Razy.256080
AhnLab-V3PUP/Win32.CloudGuard.R222345
McAfeePUP-XDW-PK
MAXmalware (ai score=87)
VBA32TScope.Trojan.MSIL
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/GdSda.A
YandexPUA.CloudScout!RjniQ7WxUBY
IkarusAdWare.MSIL.Cloudguard
FortinetMSIL/CloudGuard.D
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Razy.256080?

Razy.256080 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment