Should I remove “Razy.770481 (B)”?

The Razy.770481 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.770481 (B) virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Razy.770481 (B)?


File Info:
crc32: FB52687A
md5: 38a9f9dfd6c03d8f90c112914282924e
name: upload_file
sha1: 3c13570b628c37a652c9d93462308474ba43e34b
sha256: d1083064361eedc5d0465c53adf843b19e4cc66d074ee60d1a43fac3c536bd36
sha512: de5718125436d99e86baf41d96471fc003c61cc00d1dd951869471b0bfbf632ff1f43313b987f1c606d6b6adfcdf62828e696af907c7043ead88edb1d5f6c61c
ssdeep: 12288:b9EJ9wt2L2C1Iz0i1h4L95y/Id/SbNahcsbMM50:b4YC1Iz0ikjyQSbs6sg
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 1999 - 2020
Assembly Version: 0.0.0.0
InternalName: 5.exe
FileVersion: 9.14.18.23
CompanyName: z!91g:&4mn^73j@h#6=5p2w$f
Comments: 8p~m=06q;p/79q-)4j2r[%1j
ProductName: 8j<n{9:0jg]32j
ProductVersion: 9.14.18.23
FileDescription: 8j<n{9:0jg]32j
OriginalFilename: 5.exe

Razy.770481 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.770481
FireEye	Generic.mg.38a9f9dfd6c03d8f
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Razy.770481
Cybereason	malicious.b628c3
Cyren	W32/MSIL_Kryptik.BXV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Ad-Aware	Gen:Variant.Razy.770481
Invincea	ML/PE-A
Emsisoft	Gen:Variant.Razy.770481 (B)
SentinelOne	DFI – Malicious PE
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Trojan.Razy.DBC1B1
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Razy.770481
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34570.Hm0@aSO2pKf
MAX	malware (ai score=86)
Ikarus	Win32.Outbreak
Qihoo-360	HEUR/QVM03.0.AF5A.Malware.Gen

How to remove Razy.770481 (B)?

Razy.770481 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X