Malware

Razy.273381 removal tips

Malware Removal

The Razy.273381 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.273381 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests

Related domains:

dnsqa-m03.c644a3e76e438794c399ea1ccdb9206b.me

How to determine Razy.273381?


File Info:

crc32: 7C873F91
md5: 67cf90bc744465f4c1aef2583e139d0c
name: 67CF90BC744465F4C1AEF2583E139D0C.mlw
sha1: 50c699dccde3f739769cf0c0d1e28df4490fed69
sha256: 1e5dfa03044b59125c2664ad5d72dfdc6dc89756cd5c16c4b7d5d319195351da
sha512: 4be4fd3017542aac42d53a015680731029fa4c9d2b896f70271c397ebae986035f6af7d0bcd61e03215854cf3d47d69273a50d43339076c94f0adb2f20e4eb06
ssdeep: 24576:CQiaP0j3koiUq+Ay8eCHJ1Oij6HZBsMBTlP0QjcpMXVJoT:C98lU8eUJ1jEZBsGpf8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName:
Comments: This installation was built with Inno Setup.
ProductName: QVq9kinZBzJo
ProductVersion: 1.4
FileDescription: QVq9kinZBzJo Setup
Translation: 0x0000 0x04b0

Razy.273381 also known as:

K7AntiVirusAdware ( 0054654b1 )
LionicRiskware.Win32.Generic.1!c
DrWebTrojan.Siggen7.33125
CynetMalicious (score: 99)
ALYacGen:Variant.Ser.MSILPerseus.3069
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaAdWare:Win32/CloudScout.be917ee9
K7GWAdware ( 0054654b1 )
Cybereasonmalicious.c74446
SymantecTrojan.Gen.2
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Adware-gen [Adw]
Kasperskynot-a-virus:AdWare.Win32.CloudScout.ets
BitDefenderGen:Variant.Razy.273381
NANO-AntivirusTrojan.Win32.CloudGuard.evwqks
MicroWorld-eScanGen:Variant.Razy.273381
TencentWin32.Adware.Cloudscout.Wqxj
SophosGeneric Reputation PUA (PUA)
ComodoApplicUnwnt@#26wy431ot7o5q
VIPRECloudScout
McAfee-GW-EditionBehavesLike.Win32.PUPInstaller.bc
FireEyeGen:Variant.Razy.273381
EmsisoftGen:Variant.Razy.273381 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1124694
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Ser.MSILPerseus.3069
McAfeeArtemis!67CF90BC7444
MAXmalware (ai score=99)
VBA32Adware.CloudScout
MalwarebytesAdware.DNSUnlocker.Generic
PandaTrj/CI.A
YandexPUA.CloudGuard!SC5dRhRn3CM
FortinetRiskware/CloudGuard
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Razy.273381?

Razy.273381 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment