Malware

Razy.562954 removal instruction

Malware Removal

The Razy.562954 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.562954 virus can do?

  • Anomalous binary characteristics

How to determine Razy.562954?


File Info:

crc32: BB49FF52
md5: 32cdafe4a529ee72e14435f1cbed0422
name: wudfhost.exe
sha1: f7c53b4fd234ea8a315e76d84548f4152005db68
sha256: 1c294fe524042e4122ef612294839d73a497c208b8833c887ea1be8cbdf6c003
sha512: bceb086ad1bf5fcfb1f549dfe10124ba3720f4bb6fc1c35868561a95ecd913a9f635b7f10389a75d5b777fe5bd4c83f226f6cc63a83b166b036bcab0c920adf4
ssdeep: 98304:6Jz2RfhDo2MYYYYoYMYYYYYYjiYiYiEJzdJzTkHTOYotTvTDHibtdvJU02N+xJl:I8TDHLZ2t+noaKykJcM
type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WUDFHost.exe
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.1
FileDescription: Windows Driver Foundation - User-mode Driver Framework Host Process
OriginalFilename: WUDFHost.exe
Translation: 0x0409 0x04b0

Razy.562954 also known as:

DrWebTool.BtcMine.2110
MicroWorld-eScanGen:Variant.Razy.562954
FireEyeGeneric.mg.32cdafe4a529ee72
ALYacGen:Variant.Razy.562954
BitDefenderGen:Variant.Razy.562954
Cybereasonmalicious.fd234e
APEXMalicious
ClamAVWin.Coinminer.Generic-7151253-0
GDataGen:Variant.Razy.562954
KasperskyHEUR:Trojan.Win32.Miner.gen
AvastWin32:HarHarMiner-A [Trj]
Ad-AwareGen:Variant.Razy.562954
EmsisoftGen:Variant.Razy.562954 (B)
F-SecureHeuristic.HEUR/AGEN.1045823
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win64.Dropper.vh
Trapminesuspicious.low.ml.score
AviraHEUR/AGEN.1045823
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.D8970A
ZoneAlarmHEUR:Trojan.Win32.Miner.gen
MicrosoftTrojan:Win32/Wacatac.C!ml
AhnLab-V3Trojan/Win64.CoinMiner.R299388
Acronissuspicious
McAfeeW64/CoinMiner
MAXmalware (ai score=86)
ESET-NOD32a variant of Win64/CoinMiner.PO potentially unwanted
FortinetW64/CryptoMiner.L!tr
AVGWin32:HarHarMiner-A [Trj]
Qihoo-360Win32/Trojan.f11

How to remove Razy.562954?

Razy.562954 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment