Malware

Razy.451636 removal guide

Malware Removal

The Razy.451636 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Razy.451636 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Razy.451636?



File Info:

name: B251ADBEB4F8BCF23978.mlw
path: /opt/CAPEv2/storage/binaries/033c937cccee9ec41062695b82218ff010609f55d51f91196cb31a213bcaeec4
crc32: 27023150
md5: b251adbeb4f8bcf239784c2e51b2e870
sha1: d95f2956925a72f67024e9dc6e203475f2e3c8ab
sha256: 033c937cccee9ec41062695b82218ff010609f55d51f91196cb31a213bcaeec4
sha512: 7815bb217f0d07e799036b345e0c1feb9d768786ae2df9f4a093e87a0ea9b938e7f80c60d4b23bec343957e9d359194215e2cf405b3fa0f68ef2ba9bfe06356d
ssdeep: 6144:XPupuMOXy2FpD+Ivo+7V71X+NCvUxtWeGp0SNpZnairh7:GpuQj+7B1Xmx2N7ai97
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DDA49C58FC2B3A6ECE5C527BACE204B950FAE01C5782DAD75F80809638739ECACF4155
sha3_384: 03b3a8138cf63418d654cb85ecd25d71d215a2b5458dcdf3c22af8bb03c86ad034dd60b263cf04849197c8c39285f10f
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-05-17 15:27:28


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: mmfmf.exe
LegalCopyright:  
OriginalFilename: mmfmf.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Razy.451636 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.451636
FireEyeGeneric.mg.b251adbeb4f8bcf2
McAfeeArtemis!B251ADBEB4F8
CylanceUnsafe
ZillyaTrojan.Agent.Win32.714458
AlibabaTrojan:MSIL/GenMalicious.e98c805b
Cybereasonmalicious.eb4f8b
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.UW
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Razy.451636
NANO-AntivirusTrojan.Win32.RiskGen.dbpymo
AvastMSIL:Agent-BMU [Trj]
Ad-AwareGen:Variant.Razy.451636
SophosMal/Generic-S
ComodoMalware@#49wfco81g7wr
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.gt
EmsisoftGen:Variant.Razy.451636 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1124829
MicrosoftBackdoor:Win32/Bladabindi!ml
GDataGen:Variant.Razy.451636
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.34294.Cm0@au452wl
ALYacGen:Variant.Razy.451636
MAXmalware (ai score=99)
VBA32Trojan.Bitrep
TrendMicro-HouseCallTROJ_GEN.R002C0GKK21
TencentWin32.Trojan.Rogue.Pdbt
YandexTrojan.DL.Agent!ZD3iiRL7jbU
IkarusTrojan.DNGuard
eGambitGeneric.Trojan
FortinetMSIL/Agent.UW!tr.dldr
AVGMSIL:Agent-BMU [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Razy.451636?

Razy.451636 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment