Malware

Razy.601636 removal tips

Malware Removal

The Razy.601636 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.601636 virus can do?

  • Creates RWX memory

Related domains:

www.scalyr.com
pc.publicnewsetup.com

How to determine Razy.601636?


File Info:

crc32: B402883A
md5: bd9df7848c4a9422d5d86607f23dc59f
name: BD9DF7848C4A9422D5D86607F23DC59F.mlw
sha1: d7aab902d2a0061da423511bf6c4c1bfb98c17b5
sha256: ee401a4261575c5ab2cf1a94701daea98cfbc82b17834e0f868826b3c74cd2f4
sha512: f5a65df599643d3af2c16793801dd74960e88e3c0e348ad17475255c767fca2e1a789884e86107142933043b2635af6b4fe93ac771fa5ad63fa9eb18adef0c34
ssdeep: 12288:83gHEzXAsdoVq30n7bJmBhmakyytRc6fUE/N:8wHEzAUL3K7bJmBhpklc6f/N
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 2.1.4.5
InternalName: MusicMurderd.exe
FileVersion: 2.1.4.5
CompanyName:
LegalTrademarks:
Comments: MusicMurderd
ProductName:
ProductVersion: 2.1.4.5
FileDescription:
OriginalFilename: MusicMurderd.exe

Razy.601636 also known as:

LionicTrojan.Win32.Csdimonetize.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealPUA.AdwareFC.S17872672
ALYacGen:Variant.Razy.601636
CylanceUnsafe
ZillyaAdware.CsdiMonetize.Win32.3426
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanDownloader:MSIL/Agentb.5db7c4dd
Cybereasonmalicious.48c4a9
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Adware.CsdiMonetize.AG
APEXMalicious
AvastWin32:MiscX-gen [PUP]
KasperskyHEUR:Trojan-Downloader.MSIL.Agentb.gen
BitDefenderGen:Variant.Razy.601636
NANO-AntivirusTrojan.Win32.CsdiMonetize.imqlrg
MicroWorld-eScanGen:Variant.Razy.601636
TencentMsil.Adware.Csdimonetize.Pitx
Ad-AwareGen:Variant.Razy.601636
SophosGeneric PUA NH (PUA)
BitDefenderThetaGen:NN.ZemsilF.34236.Lm0@aeE2@Wp
VIPREMSIL.Adware.CsdiMonetize
TrendMicroAdware.MSIL.CsdiMonetize.I
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
FireEyeGeneric.mg.bd9df7848c4a9422
EmsisoftGen:Variant.Razy.601636 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1123491
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:MSIL/Bladabindi
GDataGen:Variant.Razy.601636
AhnLab-V3PUP/Win32.RL_CsdiMonetize.C3450436
McAfeeGenericRXJK-CR!BD9DF7848C4A
MAXmalware (ai score=89)
MalwarebytesAdware.Csdimonetize
PandaTrj/GdSda.A
TrendMicro-HouseCallAdware.MSIL.CsdiMonetize.I
RisingAdware.WizzNetwork!1.CDFD (CLASSIC)
YandexPUA.CsdiMonetize!5NWUXOzwHIo
IkarusAdWare.MSIL.Csdimonetize
MaxSecureTrojan.Malware.74774181.susgen
FortinetRiskware/CsdiMonetize
AVGWin32:MiscX-gen [PUP]
Paloaltogeneric.ml

How to remove Razy.601636?

Razy.601636 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment