Malware

Razy.764921 removal instruction

Malware Removal

The Razy.764921 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.764921 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Exhibits behavior characteristic of Pony malware
  • Collects information about installed applications
  • Harvests credentials from local FTP client softwares
  • Anomalous binary characteristics

How to determine Razy.764921?


File Info:

crc32: 1F45A400
md5: f6f11632ef9778bd9c93888fb613ffef
name: F6F11632EF9778BD9C93888FB613FFEF.mlw
sha1: 00a9150515c69d3973384cd0dbc17346c64c4b49
sha256: 1e21d8395648d69c7798ab40aff7907edae56a8d8f8be298959c88186b72b8cf
sha512: 65c8aaea401af92931d0b2a92e7df8729a798ffd4146f96e2475f13e414d2aaca52394bcf14c3c549f90ab1bca016a9f820c6c45a800697f33c60a929b3296a9
ssdeep: 3072:0AajaiDpQGsr+YzMOICqmpw9u3x7EltV0UEoBtktlNTs:++ilQ5r+YzeCXA6EV0ULf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: 65YFo
InternalName: Fo0ZWhLZ WTb03QzFfl K8cRR gdIC9WW bMblucS
CompanyName: LYfx WA1v3l 0Spiy4owH 4PopAtNGTVx
ProductName: 0lDCpsM 5fEI SjwesdD u3JcKW
ProductVersion: 161.149.40294
FileDescription: 3oIEAfc 5V4NZlQY ocPf1HB4lA
OriginalFilename: 9Hpj 4FjDW
Translation: 0x0409 0x04b0

Razy.764921 also known as:

K7AntiVirusTrojan ( 0040f55f1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed.2979
CynetMalicious (score: 99)
ALYacGen:Variant.Razy.764921
CylanceUnsafe
ZillyaTrojan.Tepfer.Win32.59524
SangforVirus.Win32.Mystic.atYr
AlibabaVirTool:Win32/Obfuscator.84c0219c
K7GWTrojan ( 0040f55f1 )
Cybereasonmalicious.2ef977
BaiduWin32.Trojan.Kryptik.ej
CyrenW32/S-08518dce!Eldorado
SymantecDownloader.Ponik!gen4
ESET-NOD32a variant of Win32/Kryptik.BGGP
APEXMalicious
AvastWin32:Kryptik-OEU [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Razy.764921
NANO-AntivirusTrojan.Win32.Fareit.dbngvp
MicroWorld-eScanGen:Variant.Razy.764921
TencentWin32.Trojan.Psw.Egeb
Ad-AwareGen:Variant.Razy.764921
SophosMal/Generic-S
ComodoTrojWare.Win32.Kryptik.BFY@4zqonh
BitDefenderThetaGen:NN.ZexaF.34266.jq0@aGwMEQfe
VIPRETrojan.Win32.Zbot.aba (v)
McAfee-GW-EditionPWSZbot-FCD!F6F11632EF97
FireEyeGeneric.mg.f6f11632ef9778bd
EmsisoftGen:Variant.Razy.764921 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.uccq
WebrootW32.Malware.Gen
AviraTR/PSW.Fareit.EB.5
eGambitGeneric.PSW
Antiy-AVLTrojan/Generic.ASMalwS.329D36
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftPWS:Win32/Fareit.gen!E
GDataGen:Variant.Razy.764921
AhnLab-V3Trojan/Win32.Tepfer.R75167
McAfeePWSZbot-FCD!F6F11632EF97
MAXmalware (ai score=100)
VBA32BScope.Trojan.Packed
MalwarebytesSpyware.Pony
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDML:KweuFiVxshdAyWjBIzlzbw)
YandexTrojan.GenAsa!XDhEJeLqCeE
IkarusTrojan.Crypt
FortinetW32/Kryptik.CAAF!tr
AVGWin32:Kryptik-OEU [Trj]
Paloaltogeneric.ml

How to remove Razy.764921?

Razy.764921 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment