Razy.517539 removal guide

The Razy.517539 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.517539 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.517539?


File Info:
crc32: 57F5973C
md5: 7dd0af1dd82867426d995bff861df576
name: svchost.exe
sha1: f35887710cbe69b311166c08fe2915d54433ffca
sha256: 6ab897f122801b0bce25b509c29db74bb2cfada6a56c43691cc5d0aeb7e0bd42
sha512: 37186311aa8d80c96f789529ce5ea170bd50631eb78a9f18e4c6950ad15543bb592deb073a9a627784103aeadb84fdef7b2177522c975fd46da640fc290b2dcf
ssdeep: 3072:+WK6dZyQWBeJZO5KDB4AhRSIh1++RCVlK1Tuwd1BKl:+1z074AhRNv+7
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Licensed under the GNU GPL, v3.
Assembly Version: 2.39.0.100
InternalName: Cd Live Player.exe
FileVersion: 2.39.0.100
CompanyName: Process Hacker
Comments: Process Hacker
ProductName: wj32
ProductVersion: 2.39.0.100
FileDescription: Process Hacker
OriginalFilename: Cd Live Player.exe

Razy.517539 also known as:

MicroWorld-eScan	Gen:Variant.Razy.517539
FireEye	Gen:Variant.Razy.517539
McAfee	GenericRXJE-HM!7DD0AF1DD828
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Gen:Variant.Razy.517539
Cybereason	malicious.dd8286
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
GData	Gen:Variant.Razy.517539
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Razy.517539 (B)
F-Secure	Heuristic.HEUR/AGEN.1100775
DrWeb	Trojan.DownLoader28.40425
McAfee-GW-Edition	GenericRXJE-HM!7DD0AF1DD828
Ikarus	Trojan-Downloader.MSIL.Small
eGambit	Unsafe.AI_Score_99%
Avira	HEUR/AGEN.1100775
MAX	malware (ai score=89)
Arcabit	Trojan.Razy.D7E5A3
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
Microsoft	Trojan:Win32/Wacatac.D!ml
AhnLab-V3	Malware/Win32.RL_Generic.C3460966
ALYac	Gen:Variant.Razy.517539
Ad-Aware	Gen:Variant.Razy.517539
ESET-NOD32	a variant of MSIL/TrojanDownloader.Small.CAU
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/Small.BXU!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34122.lm0@a071Vcg
AVG	Win32:CrypterX-gen [Trj]

How to remove Razy.517539?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.