Razy.762646 malicious file

The Razy.762646 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.762646 virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.762646?


File Info:
crc32: 1F90E710
md5: 1bece3fc719dffcc6b9d02256a39c0d3
name: 1BECE3FC719DFFCC6B9D02256A39C0D3.mlw
sha1: f6e9418f9f1c172518e2fe5cd10b1d94e26c9c30
sha256: 3d402a866fb1dc18d7eaaa64013502d3184c25b9f5c93bfa916b5d15cda34a11
sha512: b8bb2937917bbe8c6f293d493712fcfb13cd89c3b99b070bb264d9f5f4ad710bc11023ec3b3d1accbf172509416de09b68199bc5a6cf291a3d46a0a2e325e74a
ssdeep: 6144:YjRd6qwYPtgOoHGLkgsckgmOu7hplu/VJ1LeNWCvC63PdvmE92r9V0Xt:MRdVzPgyTpARu/sNpp3VvDY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2019 Avira Operations GmbH & Co. KG and its Licensors
InternalName: setup
FileVersion: 1.2.147.35397
CompanyName: Avira Operations GmbH & Co. KG
ProductName: Avira
ProductVersion: 1.2.147.35397
FileDescription: Avira
OriginalFilename: Avira.OE.Setup.Bundle.exe
Translation: 0x0409 0x04e4

Razy.762646 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.762646
FireEye	Generic.mg.1bece3fc719dffcc
McAfee	Artemis!1BECE3FC719D
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.MSIL.Stealer.l!c
K7AntiVirus	Trojan ( 0056fc1b1 )
BitDefender	Gen:Variant.Razy.762646
K7GW	Trojan ( 0056fc1b1 )
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
Alibaba	TrojanSpy:MSIL/Kryptik.fba78ebf
NANO-Antivirus	Trojan.Win32.Stealer.hynefg
Ad-Aware	Gen:Variant.Razy.762646
Emsisoft	Gen:Variant.Razy.762646 (B)
F-Secure	Trojan.TR/Kryptik.qnipt
Zillya	Trojan.Kryptik.Win32.2571859
TrendMicro	TROJ_GEN.R002C0WJ220
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Jiangmin	TrojanSpy.MSIL.ayop
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Kryptik.qnipt
Antiy-AVL	Trojan[Spy]/MSIL.Stealer
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AB12
Arcabit	Trojan.Razy.DBA316
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
GData	Gen:Variant.Razy.762646
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34700.Km2@a4cUMeli
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.MalPack.Caesar
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Kryptik.XXV
TrendMicro-HouseCall	TROJ_GEN.R002C0WJ220
Tencent	Win32.Trojan.Falsesign.Eclg
Ikarus	Trojan-Spy.Keylogger.AgentTesla
eGambit	PE.Heur.InvalidSig
Fortinet	MSIL/Kryptik.XXV!tr
AVG	Win32:RATX-gen [Trj]
Cybereason	malicious.f9f1c1
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.Spy.67f

How to remove Razy.762646?

Razy.762646 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X