Malware

Razy.619093 (B) (file analysis)

Malware Removal

The Razy.619093 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.619093 (B) virus can do?

  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

microsoft.redirectme.net

How to determine Razy.619093 (B)?


File Info:

crc32: A23B4648
md5: 4971d22508f019a456074595ae213261
name: 4971D22508F019A456074595AE213261.mlw
sha1: fb937bc8c0ecd4c1775de026b8a5e1a1e568b4f0
sha256: 1e4c7a653f9e8aee2aaaa2007d7dc3869acfc24a5883e9a96064dad33f901991
sha512: 1b297617a300d28c70eff657015705578fdeb919f5692d5b82202bad1a9778d8ca79aa3125d2808808d1061e2d72056299970cfc46d0d6366ad17582ab312603
ssdeep: 3072:60BbVJakXCKKI5j3dli87eKVhtug7zVECV37kUY8oilD39ZuGvW8osu:6UbHa1Sjtli87eKnMwT3dYL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Razy.619093 (B) also known as:

K7AntiVirusTrojan ( 0055e3e01 )
LionicTrojan.MSIL.Crypt.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.619093
CylanceUnsafe
ZillyaTrojan.Crypt.Win32.44990
SangforTrojan.Win32.Generic.8
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanDownloader:MSIL/Steamilik.2f9db178
K7GWTrojan ( 0055e3e01 )
Cybereasonmalicious.508f01
CyrenW32/MSIL_Kryptik.CRK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
AvastMSIL:GenMalicious-BIU [Trj]
KasperskyHEUR:Trojan.MSIL.Crypt.gen
BitDefenderGen:Variant.Razy.619093
NANO-AntivirusTrojan.Win32.Crypt.fhzcrx
MicroWorld-eScanGen:Variant.Razy.619093
TencentWin32.Trojan.Bp-autorun.Zclz
Ad-AwareGen:Variant.Razy.619093
SophosMal/Generic-S
ComodoMalware@#33icpv6xdp2za
BitDefenderThetaGen:NN.ZemsilF.34266.EmW@aOZqZhk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.gm
FireEyeGeneric.mg.4971d22508f019a4
EmsisoftGen:Variant.Razy.619093 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.MSIL.kedo
AviraHEUR/AGEN.1109329
eGambitUnsafe.AI_Score_99%
MicrosoftBackdoor:MSIL/Bladabindi
GDataGen:Variant.Razy.619093
AhnLab-V3Trojan/Win32.RL_Generic.C4014882
McAfeeArtemis!4971D22508F0
MAXmalware (ai score=100)
MalwarebytesMalware.AI.1384190261
IkarusTrojan.MSIL.NanoCore
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic!tr
AVGMSIL:GenMalicious-BIU [Trj]
Paloaltogeneric.ml

How to remove Razy.619093 (B)?

Razy.619093 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment