Razy.664340 removal instruction

The Razy.664340 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.664340 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Razy.664340?


File Info:
name: 43762726DB727273F103.mlw
path: /opt/CAPEv2/storage/binaries/e0c5f9c90d9eb427c37b4c3b1df5777547176ff3e20eb97084c0d5017c0da8a6
crc32: 282DDD4A
md5: 43762726db727273f103cc9d848fadba
sha1: 7b52c5474b35615fefbafdfb9bc79b0786bb6301
sha256: e0c5f9c90d9eb427c37b4c3b1df5777547176ff3e20eb97084c0d5017c0da8a6
sha512: 624a4914a7c5b6d5d2e6f88735c2f2d00e38c2a38f66b576e5460ed3f5e18517dbcde6f9d0dfd4887f3f6be01adc48d507586cfe656494dac1e68490d9e50958
ssdeep: 1536:qaJxRfYO3lE3p+3C58aqn1XG5zt8eV66:lxRi5T58aK9GIe7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15353D0243FA0C335D07E4BB25C73924147F0F567EA02EE2EAE85258D6E43545CE52FAA
sha3_384: 15326dd7cbf39b941459886e0d4f70f604646ecc8d25f91b4ff60168951550d9e75e431cf98bdeea7a1ba950d26e4393
ep_bytes: ff250020400000000000000000000000
timestamp: 2089-09-15 03:17:18

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsApp1
FileVersion: 1.0.0.0
InternalName: WindowsApp1.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: WindowsApp1.exe
ProductName: WindowsApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Razy.664340 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Razy.664340
FireEye	Generic.mg.43762726db727273
McAfee	Artemis!43762726DB72
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Password-Stealer ( 004b9aa01 )
Alibaba	Trojan:MSIL/Generic.b8e18735
K7GW	Password-Stealer ( 004b9aa01 )
Cybereason	malicious.6db727
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/PSW.Agent.NFI
Paloalto	generic.ml
BitDefender	Gen:Variant.Razy.664340
Tencent	Win32.Trojan.Spy.Pbpe
Ad-Aware	Gen:Variant.Razy.664340
Emsisoft	Gen:Variant.Razy.664340 (B)
Zillya	Trojan.Agent.Win32.1062692
McAfee-GW-Edition	BehavesLike.Win32.Generic.kc
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
APEX	Malicious
GData	Gen:Variant.Razy.664340
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2A9533E
Microsoft	Trojan:Win32/Occamy.CE0
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.664340
MAX	malware (ai score=82)
Yandex	Trojan.PWS.Agent!KKAp3dDXfmA
Ikarus	Trojan.MSIL.PSW
Fortinet	MSIL/Agent.NFI!tr.pws
Panda	Trj/GdSda.A

How to remove Razy.664340?

Razy.664340 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X