Razy.615904 removal guide

The Razy.615904 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.615904 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.615904?


File Info:
crc32: 12DD7248
md5: 808491a3a078e759f5fb026f36880ab0
name: 808491A3A078E759F5FB026F36880AB0.mlw
sha1: ad892147a5b6c6dab0a4c378417655d75dd1cafa
sha256: 5823256f16a31d5a28d722d15b6e8ab1c0d803d43f2beaf85aa41255f8c5d30a
sha512: 9e9faf1513b1fdd3846c2f10f4b4e2e42e988c59a6c25627414381d409bb90bfe8fd494e3ed3e95798caa455873f4fe18efab9622d428c2ed060f82c290ce945
ssdeep: 384:gaJRUorpAokSe6DMOB6sLGS5gtQIZazwLUyVCwoT2MM4PwdprO:gas0pAokp26sGS5qazwgGm44PirO
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 1996-2018 VideoLAN and VLC Author
Assembly Version: 3.0.3.0
InternalName: nyan.exe
FileVersion: 3.0.3.0
CompanyName: VLC media player
LegalTrademarks: VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Comments: VLC media player
ProductName: VLC media player
ProductVersion: 3.0.3.0
FileDescription: VLC media player
OriginalFilename: nyan.exe

Razy.615904 also known as:

MicroWorld-eScan	Gen:Variant.Razy.615904
FireEye	Generic.mg.808491a3a078e759
McAfee	Artemis!808491A3A078
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0056a61a1 )
BitDefender	Gen:Variant.Razy.615904
K7GW	Trojan ( 0056a61a1 )
Cybereason	malicious.3a078e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Ad-Aware	Gen:Variant.Razy.615904
Emsisoft	Gen:Variant.Razy.615904 (B)
F-Secure	Trojan.TR/Spy.ClipBanker.cdhfg
DrWeb	Trojan.ClipBankerNET.7
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.ClipBanker
Webroot	W32.Trojan.Gen
Avira	TR/Spy.ClipBanker.cdhfg
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.D965E0
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
GData	Gen:Variant.Razy.615904
Cynet	Malicious (score: 85)
BitDefenderTheta	Gen:NN.ZemsilF.34590.bm0@a4avmIf
ALYac	Gen:Variant.Razy.615904
Malwarebytes	Trojan.MalPack.MSIL
ESET-NOD32	a variant of MSIL/ClipBanker.OL
eGambit	Unsafe.AI_Score_96%
Fortinet	MSIL/ClipBanker.OL!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Razy.615904?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.