Razy.642465 removal instruction

The Razy.642465 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.642465 virus can do?

Network activity detected but not expressed in API logs

How to determine Razy.642465?


File Info:
crc32: BC116339
md5: 4c979bf207056f50119089823a3c2350
name: 4C979BF207056F50119089823A3C2350.mlw
sha1: b4882299865f72d0e75d15c3840788ec698a0a7e
sha256: 26655d8dead2857f78fd7bdc68687c893aa4b0b1bf4b0fdc39142d9b0f2305a5
sha512: 8073eae344e0b70f3765458578b8999051541249d697f721c569ee45fdcb1f1ff91dd329946306a80e4697c9edabcecbcc0c3fb873867492c60189202fe70d77
ssdeep: 12288:Qz1malijGP9UkwXswYvyIjRN1cAw+oimEr9IFbdpAEqB1AoX40219P/faEjIqXj:C7lijbYvyYMtYmEWFzgor
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2000
Assembly Version: 1.0.1.5
InternalName: 1.exe
FileVersion: 1.1.1.6
CompanyName: aHmSKhuPNA5
LegalTrademarks: aVHkh0M4tn4
ProductName: aM21VWCTPnP
ProductVersion: 1.1.1.6
FileDescription: a8JXBFqQ2hD
OriginalFilename: 1.exe

Razy.642465 also known as:

K7AntiVirus	Trojan ( 700000121 )
Lionic	Trojan.MSIL.Disfa.4!c
Elastic	malicious (high confidence)
McAfee	Artemis!4C979BF20705
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:MSIL/Injector.1538a03d
K7GW	Trojan ( 700000121 )
Cybereason	malicious.207056
Cyren	W32/Trojan.FCX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.DTG
APEX	Malicious
Avast	MSIL:Agent-BHB [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.642465
NANO-Antivirus	Trojan.Win32.Disfa.dxsbpu
MicroWorld-eScan	Gen:Variant.Razy.642465
Tencent	Win32.Trojan.Generic.Pftn
Sophos	Mal/Generic-S + Mal/Dotnet-Q
Comodo	Malware@#2p4ue6td0l1w2
BitDefenderTheta	Gen:NN.ZemsilF.34236.1m0@aS5dFn
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R034E01IP14
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.4c979bf207056f50
Emsisoft	Gen:Variant.Razy.642465 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1100379
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.AEFD81
Kingsoft	Win32.Troj.Disfa.ee.(kcloud)
Microsoft	Trojan:Win32/Occamy.C26
GData	Gen:Variant.Razy.642465
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
MAX	malware (ai score=87)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R034E01IP14
Yandex	Trojan.Disfa!as/THoy3NXE
Ikarus	Trojan.MSIL.Disfa
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Disfa.EEBR!tr
AVG	MSIL:Agent-BHB [Trj]
Paloalto	generic.ml

How to remove Razy.642465?

Razy.642465 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X