Razy.258053 (B) removal instruction

The Razy.258053 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.258053 (B) virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.258053 (B)?


File Info:
crc32: F54CD36E
md5: 7c25cb77ee063058127e792e3b4d1fef
name: 7C25CB77EE063058127E792E3B4D1FEF.mlw
sha1: 595bc5e1b6b3291639e03061f1d45a25bed2bdb0
sha256: 212b769a5e78a7ba8b79c987162db6ae493b2ce2dcf3b21724b7aeac109b2614
sha512: 6fd9d77c5a1ed4e82f13591e3a3a2e08b9ebd45b2a50a2d1c0cb3a7e85126d9878177636bcfe050534de001ecf519a40b78040036ca2d99f3fa348af198368f6
ssdeep: 24576:ubQmnTq+NFZqejV8NFZqe5e8aCBJ89+kA6gNTs:lR+PZqeB8PZqet8UkATN
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright CC xa92017 .
Assembly Version: 1.3.2.2
InternalName: Haheiilx.exe
FileVersion: 1.3.2.2
CompanyName: present ltd
LegalTrademarks: present
Comments: present
ProductName: present Client                                       
ProductVersion: 1.3.2.2
FileDescription: present
OriginalFilename: Haheiilx.exe

Razy.258053 (B) also known as:

K7AntiVirus	Adware ( 005465501 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.35582
Cynet	Malicious (score: 99)
CAT-QuickHeal	PUA.CloudguardFC.S20327803
ALYac	Gen:Variant.Razy.258053
Cylance	Unsafe
Zillya	Adware.CloudScout.Win32.394
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Adware ( 005465501 )
Cybereason	malicious.7ee063
Cyren	W32/S-7699eab4!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.CloudGuard.D
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Agent.gen
BitDefender	Gen:Variant.Razy.258053
NANO-Antivirus	Trojan.Win32.CloudGuard.exychr
MicroWorld-eScan	Gen:Variant.Razy.258053
Tencent	Msil.Adware.Cloudguard.Ahyj
Ad-Aware	Gen:Variant.Razy.258053
Sophos	CloudGuard (PUA)
Comodo	ApplicUnwnt@#3k6kj9yggrdum
BitDefenderTheta	Gen:NN.ZemsilF.34294.tn0@auXacKd
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	PUP-XDR-KS
FireEye	Generic.mg.7c25cb77ee063058
Emsisoft	Gen:Variant.Razy.258053 (B)
SentinelOne	Static AI – Malicious PE
Avira	ADWARE/CloudGuard.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.24F751B
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Gen:Variant.Razy.258053
AhnLab-V3	PUP/Win32.CloudGuard.R222345
McAfee	PUP-XDR-KS
MAX	malware (ai score=99)
VBA32	Adware.CloudScout
Malwarebytes	Adware.CloudGuard.TskLnk
Panda	Trj/GdSda.A
Yandex	PUA.CloudScout!W4oOpvrpDlk
Ikarus	AdWare.MSIL.Cloudguard
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/CloudGuard
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Razy.258053 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Razy.258053 (B) removal instruction