Malware

Razy.629640 removal instruction

Malware Removal

The Razy.629640 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Razy.629640 virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Razy.629640?



File Info:

crc32: 4C26F9AC
md5: 2fca8cbfe9f4166933cea20e14d7f125
name: 2FCA8CBFE9F4166933CEA20E14D7F125.mlw
sha1: 8da1e6b4006128578a2cfdff795c7449755cd2ce
sha256: 056427eb270c9c1b52b3027af7bf2291a129c65b7805e3b0b86e8597597edd4c
sha512: 9b07a1f2c97eddc9f3d4541498a1cb3ec8b48cbdf7b24487c33b80487f71c1091d796ee1f7db540416879a074d3e8a86d61ea2f29cc1b1ae0fc40001725eaaed
ssdeep: 24576:B9S26apj49ibmMaFWkHBma9xtwCowSUD2sJ0DfHZGyxszcwQ:BN6apj42BsD9vvnh7J0DPtxe
type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows


Version Info:

LegalCopyright: Copyright xc2xa9 2018
FileVersion: 1.8.0_171-b11
CompanyName: 
ProductName: Java(TM) Platform SE 8
ProductVersion: 1.8.0_171-b11
FileDescription: Java(TM) Platform SE binary
OriginalFilename: java.exe
Translation: 0x0000 0x04b0

Razy.629640 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.61579
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.629640
CylanceUnsafe
Cybereasonmalicious.fe9f41
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/CoinMiner.MW
APEXMalicious
AvastFileRepMalware
ClamAVWin.Trojan.Razy-9892381-0
KasperskyTrojan.Win32.Miner.ayywp
BitDefenderGen:Variant.Razy.629640
MicroWorld-eScanGen:Variant.Razy.629640
TencentWin64.Trojan.Coinminer.Hwdm
Ad-AwareGen:Variant.Razy.629640
SophosMal/Generic-S
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionBehavesLike.Win64.Dropper.tc
FireEyeGeneric.mg.2fca8cbfe9f41669
EmsisoftGen:Variant.Razy.629640 (B)
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.BitCoinMiner.yxy
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1120937
MicrosoftTrojan:Script/Phonzy.C!ml
ZoneAlarmnot-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.gen
GDataGen:Variant.Razy.629640
AhnLab-V3Trojan/Win.Miner3.R424045
McAfeeGenericRXAA-AA!2FCA8CBFE9F4
MAXmalware (ai score=83)
MalwarebytesTrojan.BitCoinMiner
PandaTrj/CI.A
RisingHackTool.CoinMiner!1.CB20 (CLASSIC)
YandexTrojan.GenAsa!D7CCRkGYi1M
IkarusTrojan.Win64.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/BitCoinMiner
AVGFileRepMalware

How to remove Razy.629640?

Razy.629640 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment