Should I remove “Razy.618249”?

The Razy.618249 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.618249 virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Unconventionial language used in binary resources: Russian
• Authenticode signature is invalid
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Anomalous binary characteristics

How to determine Razy.618249?

File Info:
name: A14477FDB8E13B8231D6.mlw
path: /opt/CAPEv2/storage/binaries/0007ce9479539ab3bf3c956c64e62badb30da868062597be448d034ca1b59418
crc32: D934D4F2
md5: a14477fdb8e13b8231d6ec8978959654
sha1: e3d2c6e07ffc8f8893d0611dd881ffe95641f8ff
sha256: 0007ce9479539ab3bf3c956c64e62badb30da868062597be448d034ca1b59418
sha512: 716166b35e3083fe84d4d41a88ee696b98a96084de5cbee4a1989e8376830d0074896dfa3d4e2684724c4992afab5af1ed1fd2ddffbcb9d75e89b8d9c9d60725
ssdeep: 49152:Jp832TmTgdT9GIVWglhVEaenzU7Z3A2KXuwMpTc7AZeIJQgneIAql9SS2qHx3NtK:JpqT4RGIVByNcAN5MRZeE8dqDl8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T153E533923B88E0B1CE76CA36DF0EFB2A1677D71567989E4351845F210ED31F6024B2DA
sha3_384: 5c2138c8470e871f55aa02ddb2d3c6e59aacfbde1b6703a2fca4d46c2578b1833c5f8c5a1e01df4fadce78dff415cda3
ep_bytes: 558bec6aff68504c410068801f410064
timestamp: 2010-06-27 07:06:38

Version Info:
CompanyName: Happy DevTeam
FileDescription: Happy Macro For Raven
FileVersion: 1.14f
LegalCopyright: Copyright © 2015 Happy DevTeam
LegalTrademarks: 
PrivateBuild: 2015
ProductName: Happy Macro For Raven
ProductVersion: 1.14f
Translation: 0x0000 0x04b0

Razy.618249 also known as:

How to remove Razy.618249?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.