Razy.654916 malicious file

The Razy.654916 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.654916 virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Razy.654916?


File Info:
crc32: E1394EFE
md5: 57d9bca194beb23cc501a44962db310f
name: 57D9BCA194BEB23CC501A44962DB310F.mlw
sha1: d38acf45d27f7b02eb6b8e35a231cf85bec86e64
sha256: e473c9f166845d6ed9abcafa701ad4b875bbd6d1bd9534bbcfdfa447f3aa7ef9
sha512: a7064366fd702a9d012a1dd907d17f94ee3008030acb8734ca2087ea2449f22b21e806b6e6cfeb9cfefd48da0dd7e509664aab12f0bc1e26bf047c447c87d706
ssdeep: 49152:mQQ9N5xFEqomKBHuJkVyPi6D9MY56KlCGb2vak/sw9Ymffg:mXNb/VKtuJsG9FCvadqYmffg
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: xa92020 BitTorrent, Inc. All Rights Reserved.
InternalName: uTorrent.exe
FileVersion: 3.5.5.45828
CompanyName: BitTorrent Inc.
SpecialBuild: stable34 stable
ProductName: xb5Torrent
ProductVersion: 3.5.5.45828
FileDescription: xb5Torrent
OriginalFilename: uTorrent.exe
Translation: 0x0409 0x04e4

Razy.654916 also known as:

Lionic	Trojan.Win32.Razy.4!c
ALYac	Gen:Variant.Razy.654916
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.C
BitDefender	Gen:Variant.Razy.654916
Cybereason	malicious.194beb
Cyren	W32/Trojan.CJIV-5851
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/uTorrent.E potentially unwanted
APEX	Malicious
MicroWorld-eScan	Gen:Variant.Razy.654916
Ad-Aware	Gen:Variant.Razy.654916
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Sality.tc
FireEye	Gen:Variant.Razy.654916
Emsisoft	Gen:Variant.Razy.654916 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
GData	Gen:Variant.Razy.654916
McAfee	Artemis!57D9BCA194BE
MAX	malware (ai score=87)
VBA32	Trojan.Agent
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazrgarYC1n13hfOrw1lTyWhW)
Yandex	Trojan.Agent!Y1MKcSXOUTc
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/uTorrent.E6A1

How to remove Razy.654916?

Razy.654916 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X