Razy.649734 removal

The Razy.649734 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.649734 virus can do?

How to determine Razy.649734?


File Info:
crc32: 1D1418C8
md5: 47a69842a7e6302acd847e9a59c72c89
name: 47A69842A7E6302ACD847E9A59C72C89.mlw
sha1: 517ec5ae134d009b94b5046fded23bf1498ddb07
sha256: 2673c382639a0a837f954f7abf26e813fad8bcd6cd56165fe446d30de0e7890b
sha512: 4e1aeff6df1158199744adf0b3b4737af5780d5c32dfba30e0b56af452c9860b13fe288d49040141a8e34a83b72077d759306c364d6923193780d590046c7a1d
ssdeep: 3072:O3P/ZKg5YjQwQSGL+SKZ0QSrNKAR4BYPqsaXLaOS4WWH2s:g55RSGLlEwg/XjW
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2005
Assembly Version: 4.6.8.36
InternalName: screenshot.exe
FileVersion: 6.8.10.40
CompanyName: aQgSeHZzXhwr
LegalTrademarks: aQEoRPZIr4539Mh
ProductName: aAjR51RBoT1Wg
ProductVersion: 6.8.10.40
FileDescription: aVar6ZjXTjW
OriginalFilename: screenshot.exe

Razy.649734 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.649734
FireEye	Generic.mg.47a69842a7e6302a
McAfee	Trojan-FDUD!47A69842A7E6
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005469461 )
BitDefender	Gen:Variant.Razy.649734
K7GW	Trojan ( 005469461 )
Baidu	MSIL.Trojan.Injector.q
Cyren	W32/MSIL_Troj.EJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	MSIL:GenMalicious-AUN [Trj]
ClamAV	Win.Packed.Ranos-6898024-0
Kaspersky	Trojan-Ransom.Win32.Blocker.dhpb
Alibaba	Ransom:MSIL/Blocker.a7f82ac3
NANO-Antivirus	Trojan.Win32.Disfa.dkkgvm
AegisLab	Trojan.Win32.Generic.mzOn
Rising	Ransom.Blocker!8.12A (CLOUD)
Ad-Aware	Gen:Variant.Razy.649734
Emsisoft	Gen:Variant.Razy.649734 (B)
Comodo	TrojWare.MSIL.TrojanDownloader.Small.DS@6ldchl
F-Secure	Trojan.TR/Dropper.MSIL.Gen
VIPRE	Backdoor.MSIL.Bladabindi.a (v)
TrendMicro	BKDR_RANOS.SM1
McAfee-GW-Edition	Trojan-FDUD!47A69842A7E6
Sophos	Mal/Generic-S + Troj/MSIL-EHX
Ikarus	Trojan.Win32.Ibashade
Jiangmin	Trojan.Blocker.sje
Avira	TR/Dropper.MSIL.Gen
MAX	malware (ai score=87)
Antiy-AVL	Trojan[Ransom]/Win32.Blocker
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	TrojanDownloader:MSIL/Ranos.A
Arcabit	Trojan.Razy.D9EA06
ZoneAlarm	Trojan-Ransom.Win32.Blocker.dhpb
GData	Gen:Variant.Razy.649734
Cynet	Malicious (score: 100)
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZemsilF.34608.jm0@a883MAc
ALYac	Gen:Variant.Razy.649734
VBA32	Hoax.Blocker
Malwarebytes	Bladabindi.Backdoor.Njrat.DDS
Panda	Trj/CI.A
ESET-NOD32	a variant of MSIL/Injector.CJO
TrendMicro-HouseCall	BKDR_RANOS.SM1
Tencent	Win32.Trojan.Blocker.Pegc
Yandex	Trojan.Blocker!stBPnkTUkQI
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Injector.CKC!tr
AVG	MSIL:GenMalicious-AUN [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HwMAar8A

How to remove Razy.649734?

Razy.649734 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X