Should I remove “Razy.768334”?

The Razy.768334 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.768334 virus can do?

Possible date expiration check, exits too soon after checking local time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.768334?


File Info:
crc32: C59BDA7F
md5: 695a1785eb9f04470bb833a5fa43888f
name: 695A1785EB9F04470BB833A5FA43888F.mlw
sha1: d4722993e52b820f4476ca2a3efefbcd860782cc
sha256: 210b2e070b5ba296e5441faf7c10d48439a55b1a2885349b33a339b7e3ebdc9a
sha512: 869dcf77edc184806f8dc2e10582bea8b45c375beda6f83bfe29a64fc3bc8cf9acc6f65c3986fa2f5c2c3b28587be5fe0f940b994d26b79bcbf6028fbec25c41
ssdeep: 384:4Dvi+JmG6yqlCRaJt4RHS5LutGJae7g9VJnpWCNJbW:4NcG6xlCRaJKGOA7SHJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: svchost.exe
FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.1.2600.5512
FileDescription: Generic Host Process for Win32 Services
OriginalFilename: svchost.exe
Translation: 0x0409 0x04b0

Razy.768334 also known as:

Lionic	Virus.Win32.Virut.lWhq
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Razy.768334
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Virus:Win32/Virtu.a429a8de
Cybereason	malicious.5eb9f0
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Virtu-F [Inf]
BitDefender	Gen:Variant.Razy.768334
MicroWorld-eScan	Gen:Variant.Razy.768334
Ad-Aware	Gen:Variant.Razy.768334
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34294.cq0@aeFoiGmi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.695a1785eb9f0447
Emsisoft	Gen:Variant.Razy.768334 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Variant.Razy.768334
Acronis	suspicious
McAfee	Artemis!695A1785EB9F
MAX	malware (ai score=85)
Ikarus	Virus.Win32.Patched
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.F
AVG	Win32:Virtu-F [Inf]
Paloalto	generic.ml

How to remove Razy.768334?

Razy.768334 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X