Razy.652951 information

The Razy.652951 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.652951 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Razy.652951?


File Info:
crc32: A0681AA1
md5: 99ee98a71c9fb5a3afc96c57d3bcb3da
name: 99EE98A71C9FB5A3AFC96C57D3BCB3DA.mlw
sha1: ff5b62f61a3e745a7da0a95acada81aa23743778
sha256: 83f8ae320a18ab26c855162ad18d28e0669327ef71b28f630272ff2b43298608
sha512: 4716e1b011e3a5f95ae72f94f795a077fc9924099070103d3aff2a108807e10875f7d9697d77abe9be3e8830dafb33fb9df152db350e348ab231c20ba72f5ffd
ssdeep: 768:5fZ3XZhUMTv/+93DNlYN40ZVpcrpCEl+YMajQImOswUlGva9AdAwG:hZnnGDsNXZzcr/l+Lou0c8NO
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Razy.652951 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Gozi.795
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.652951
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Ursnif.CT
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.Win32.Gozi.vho
BitDefender	Gen:Variant.Razy.652951
NANO-Antivirus	Trojan.Win32.Gozi.inztre
MicroWorld-eScan	Gen:Variant.Razy.652951
Ad-Aware	Gen:Variant.Razy.652951
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZedlaF.34608.cu4@aSbK3ae
McAfee-GW-Edition	BehavesLike.Win32.Dropper.pc
FireEye	Generic.mg.99ee98a71c9fb5a3
Emsisoft	Gen:Variant.Razy.652951 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.ZPACK.Gen2
eGambit	Unsafe.AI_Score_87%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.652951
AhnLab-V3	Malware/Gen.Reputation.C4332625
McAfee	Trojan-FTHW!99EE98A71C9F
MAX	malware (ai score=84)
Malwarebytes	Trojan.Ursnif
Panda	Trj/GdSda.A
Rising	Spyware.Ursnif!8.1DEF (RDMK:cmRtazqSODy/veGgmAlsdbMJIBtW)
Ikarus	Trojan-Spy.Agent
AVG	Win32:BankerX-gen [Trj]
Qihoo-360	Win32/TrojanPSW.Gozi.HygB7L8A

How to remove Razy.652951?

Razy.652951 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X