Malware

Razy.699711 (B) removal instruction

Malware Removal

The Razy.699711 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.699711 (B) virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • A process was set to shut the system down when terminated
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Razy.699711 (B)?


File Info:

crc32: 3D91E113
md5: 22d8af21d0f0e956950a5c1491988c5d
name: 22D8AF21D0F0E956950A5C1491988C5D.mlw
sha1: 35bb324c4405be0e7817cb38cba270658bab4fe3
sha256: 213fa99e9fb50bcb16c600a9488eab039a28f508261d92d105db21920b985d0d
sha512: 065e8e0dc53a4884715b80682410cf9d2296057b823dd71daf1a815737c582b87fb763c76320bb40d3207a202c3fa5144d053512852e50181b7333d9bd1eb53c
ssdeep: 24576:i0B4fRlnqc3+QYpbZPWWmjN+Yfy70ydW2mm9:BSjqcuQYptPWbjN+Y67Am
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Razy.699711 (B) also known as:

K7AntiVirusTrojan ( 700000121 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader27.5112
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.699711
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaBackdoor:MSIL/Bladabindi.90861f49
K7GWTrojan ( 700000121 )
Cybereasonmalicious.1d0f0e
BaiduMSIL.Backdoor.Bladabindi.a
CyrenW32/MSIL_Bladabindi.ER.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Bladabindi.AY
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Packed.Bladabindi-6917466-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.699711
NANO-AntivirusTrojan.Win32.Bladabindi.fierzp
MicroWorld-eScanGen:Variant.Razy.699711
TencentWin32.Trojan.Generic.Hrpg
Ad-AwareGen:Variant.Razy.699711
SophosMal/Generic-R + Troj/Bbindi-W
BitDefenderThetaGen:NN.ZemsilF.34294.8nW@a0RLWbd
McAfee-GW-EditionBehavesLike.Win32.Generic.tm
FireEyeGeneric.mg.22d8af21d0f0e956
EmsisoftGen:Variant.Razy.699711 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen7
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.281A134
MicrosoftBackdoor:MSIL/Bladabindi.AP
ArcabitTrojan.Razy.DAAD3F
GDataGen:Variant.Razy.699711
McAfeeBackDoor-FDNN!22D8AF21D0F0
MAXmalware (ai score=99)
VBA32Trojan.Downloader
MalwarebytesMachineLearning/Anomalous.95%
PandaTrj/GdSda.A
RisingBackdoor.Njrat!1.9E49 (CLASSIC)
YandexTrojan.Agent!4JWJdXRDQao
IkarusTrojan.MSIL.Bladabindi
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Bbindi.W!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove Razy.699711 (B)?

Razy.699711 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment