Malware

Razy.593310 removal guide

Malware Removal

The Razy.593310 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.593310 virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs

How to determine Razy.593310?


File Info:

crc32: 63448211
md5: d801a8d6514dc313c91797bb597e7925
name: D801A8D6514DC313C91797BB597E7925.mlw
sha1: 8de93daac7930a417cba30ee00b6d3377c379761
sha256: 279bfa35a3026260a26e9812b88b2c31213a278e54684bbf85cef3e811c029a5
sha512: 19a7c3f611b2d7474994c44ed3556a962fd92010c723b763fca907dcb0d185c192aa71a0ddd39e70949544095e69ee383c18a816f007834066c06f15babe9088
ssdeep: 768:1g8X5aSL8dgxWfj01TJqklX4PhHBXEYLnw3vUD6dqJCZkmB2XtiRg:18ESw3vUD6dPkmB2dmg
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.3954.26483
InternalName: wrbkpnb.exe
FileVersion: 1.0.3954.26483
ProductVersion: 1.0.3954.26483
FileDescription:
OriginalFilename: wrbkpnb.exe

Razy.593310 also known as:

ALYacGen:Variant.Razy.593310
SangforSuspicious.Win32.Razy.593310
BitDefenderGen:Variant.Razy.593310
Cybereasonmalicious.6514dc
MicroWorld-eScanGen:Variant.Razy.593310
Ad-AwareGen:Variant.Razy.593310
McAfee-GW-EditionArtemis
FireEyeGen:Variant.Razy.593310
EmsisoftGen:Variant.Razy.593310 (B)
AegisLabTrojan.Win32.Razy.4!c
GDataGen:Variant.Razy.593310
McAfeeArtemis!D801A8D6514D
MAXmalware (ai score=85)
MalwarebytesMachineLearning/Anomalous.95%
TrendMicro-HouseCallTROJ_GEN.R002H09ET21
IkarusTrojan-Ransom.Blocker

How to remove Razy.593310?

Razy.593310 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment