Razy.754797 removal instruction

The Razy.754797 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.754797 virus can do?

Network activity detected but not expressed in API logs

How to determine Razy.754797?


File Info:
crc32: 3A43C74F
md5: b11a4452d8eb3b4e8561b549340a279e
name: B11A4452D8EB3B4E8561B549340A279E.mlw
sha1: b108e71ff120156a5c2841124e5449d252850e97
sha256: 0045487ca5a2421d8fe84dbb403bd65842e148be776feea8e71e2674382e6c8a
sha512: cccd8517ca6ed5edfe9739eaea9a213d7c7db8804d8c7de9ad687bb903ccae8b4d609ba9e0484e3bdeca82db31f759d8e9adadc7b161dbe670824522370e4e1f
ssdeep: 1536:O22f3OxTplnB4lMIC8Sg/Bu/aa46un2JJ7fFlFQDqrfv:O22kUcL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2018
Assembly Version: 1.0.0.0
InternalName: bro.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
Comments: Tencent-Game
ProductName: PUBG
ProductVersion: 1.0.0.0
FileDescription: PUBG
OriginalFilename: bro.exe

Razy.754797 also known as:

K7AntiVirus	Trojan ( 004d87c31 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.114
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.754797
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.380979
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:MSIL/Skeeyah.e5050d7e
K7GW	Trojan ( 004d87c31 )
Cybereason	malicious.2d8eb3
Symantec	Backdoor.Ratenjay
ESET-NOD32	a variant of MSIL/Kryptik.EMQ
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.Razy.754797
NANO-Antivirus	Trojan.Win32.Kryptik.fksohx
MicroWorld-eScan	Gen:Variant.Razy.754797
Tencent	Msil.Trojan.Generic.Pbew
Ad-Aware	Gen:Variant.Razy.754797
Sophos	Mal/Generic-R + Troj/MSIL-FIN
Comodo	Malware@#1wfddf6uimunn
BitDefenderTheta	Gen:NN.ZemsilF.34266.fq0@ayDfmWo
McAfee-GW-Edition	BehavesLike.Win32.BackdoorNJRat.nt
FireEye	Generic.mg.b11a4452d8eb3b4e
Emsisoft	Gen:Variant.Razy.754797 (B)
Avira	HEUR/AGEN.1101150
eGambit	Unsafe.AI_Score_94%
Antiy-AVL	Trojan/Generic.ASMalwS.29A0050
Microsoft	Trojan:Win32/Skeeyah.A!bit
GData	Gen:Variant.Razy.754797
AhnLab-V3	Trojan/Win32.Skeeyah.C2906848
McAfee	Packed-MR!B11A4452D8EB
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Panda	Trj/CI.A
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.EOO!tr
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml

How to remove Razy.754797?

Razy.754797 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X