Razy.550885 removal guide

The Razy.550885 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.550885 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.550885?


File Info:
crc32: C179D350
md5: d6a3bd10dd0ee7e45d1a6cf078aff400
name: vschost.exe
sha1: 887056a889c217073599436e6294622f51690f91
sha256: 708194715670c7e2e6a2d5eeb909f4a56c703a6d8c22db43c8898766c60f76c1
sha512: a049c85e4bc9834cba4dbebf8a3febccda546ec3f65f39b13fb47c216d9ebe3c5531a41c7eb0a40278c9f569d3588f8445ab54e42fc98e3e0bee4841d4e5351c
ssdeep: 192:6YR5HgMUbATmTMxGsL3AEBQfkB3x3sTDWOG81:6TATubQ3A85Vx8TDbv
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright
Assembly Version: 0.0.2.0
InternalName: vschost.exe
FileVersion: 0.0.2.0
CompanyName: 
LegalTrademarks: 
Comments: private
ProductName: 
ProductVersion: 0.0.2.0
FileDescription: vschost
OriginalFilename: vschost.exe

Razy.550885 also known as:

MicroWorld-eScan	Gen:Variant.Razy.550885
FireEye	Gen:Variant.Razy.550885
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Gen:Variant.Razy.550885
K7GW	Trojan ( 700000121 )
BitDefenderTheta	Gen:NN.ZemsilF.34106.am0@ai25@xl
Cyren	W32/Razy.EM.gen!Eldorado
Avast	Win32:PWSX-gen [Trj]
GData	Gen:Variant.Razy.550885
Kaspersky	HEUR:Trojan-PSW.MSIL.Agent.gen
Endgame	malicious (high confidence)
Sophos	Troj/MSIL-NCR
F-Secure	Heuristic.HEUR/AGEN.1110045
Emsisoft	Gen:Variant.Razy.550885 (B)
F-Prot	W32/Razy.EM.gen!Eldorado
Avira	HEUR/AGEN.1110045
MAX	malware (ai score=85)
Microsoft	PWS:MSIL/Discord.DHA!MTB
Arcabit	Trojan.Razy.D867E5
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agent.gen
AhnLab-V3	Trojan/Win32.RL_Agent.C3448983
ALYac	Gen:Variant.Razy.550885
Ad-Aware	Gen:Variant.Razy.550885
Malwarebytes	Spyware.PasswordStealer
APEX	Malicious
ESET-NOD32	a variant of MSIL/PSW.Discord.BI
Fortinet	MSIL/Agent.RFZ!tr
AVG	Win32:PWSX-gen [Trj]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Razy.550885?

Razy.550885 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X