How to remove "Razy.301902 (B)"?

The Razy.301902 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.301902 (B) virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Steals private information from local Internet browsers
Attempts to create or modify system certificates
Anomalous binary characteristics

Related domains:

ip-api.com

www.facebook.com

How to determine Razy.301902 (B)?


File Info:
crc32: E65766FC
md5: d52d4605e143e652bd35c81722eac315
name: D52D4605E143E652BD35C81722EAC315.mlw
sha1: 639b3f8d6e0057f8ad0ae9df9ceaf87c8f254044
sha256: a9de0ab9937450843d884d96a20bf99a9500444bafb09fa898a2168752443172
sha512: 068c28301a807ff8abd716d7327112bbfc56d0072b3efe84ab2f4cdf6deea3a857ebfde447118ddec0ff574b1a7e130e38c6c28409be7d1eb51d7e06e9e20df4
ssdeep: 49152:pAI+X/sAfNmBZW6hiZyNeMR33s+BBAuDcp8IRIBWzj8Zk9:pAI+EAloWZZyNeaHhDc+IE8Og
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Company                                                                                             
FileDescription: NewProduct 1.00 Installation                                
FileVersion: 1.00                
Comments: 
CompanyName: Company                                                     
Translation: 0x0409 0x04e4

Razy.301902 (B) also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005723511 )
DrWeb	Trojan.MulDrop16.31196
Cynet	Malicious (score: 99)
CAT-QuickHeal	PUA.IgenericRI.S15903427
ALYac	Gen:Variant.Zusy.380087
Cylance	Unsafe
K7GW	Trojan ( 005723511 )
Cybereason	malicious.5e143e
Cyren	W32/CookieStealer.E.gen!Eldorado
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.CookiesStealer.b
BitDefender	Gen:Variant.Razy.301902
NANO-Antivirus	Riskware.Win32.PSWTool.hqsnsl
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
MicroWorld-eScan	Gen:Variant.Razy.301902
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34688.8uW@aaa2Umjj
FireEye	Gen:Variant.Razy.301902
Emsisoft	Gen:Variant.Razy.301902 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Redcap.ahesa
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2FFCE3E
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Trojan.Win32.CoinMiner.vb!s8
Arcabit	Trojan.Razy.D49B4E
ZoneAlarm	not-a-virus:HEUR:PSWTool.Win32.PassView.a
GData	Trojan.GenericKD.46281738
MAX	malware (ai score=86)
Malwarebytes	Generic.Trojan.Malicious.DDS
Rising	Stealer.Agent!8.C2 (CLOUD)
Yandex	Trojan.Blocker!OH3Aj8L7MuI
Ikarus	Trojan-Spy.Win32.QuStealer
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
AVG	Win32:Malware-gen

How to remove Razy.301902 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Razy.301902 (B)”?