Razy.770988 removal instruction

The Razy.770988 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.770988 virus can do?

Executable code extraction
Expresses interest in specific running processes
Performs some HTTP requests
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Attempts to disable System Restore
Anomalous binary characteristics
Attempts to modify Explorer settings to prevent file extensions from being displayed
Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

edgedl.me.gvt1.com

update.googleapis.com

How to determine Razy.770988?


File Info:
crc32: 325C9A53
md5: 17e49be8faa0504983971b60c7b5f634
name: 17E49BE8FAA0504983971B60C7B5F634.mlw
sha1: 8f12c6485b9961bc47982aea9c9aa29bf1eb71d2
sha256: 1219464337988eed50c85eebacaf5b4d3c9ae9307e7b4f5b308297be1d06d034
sha512: e4fe17c93ca3cb942b7c1152ebd571d2fa9c9858c7ff866069cf04e92df49cd73893fdc6ee2336384b41be786d40dcb1214dff7a14e04015bce3c6c8ddaeefba
ssdeep: 3072:zodKw7tnZZBoaoxd/8Gx19l6kmpJDuSRqmatM4R8SXJ7v4QVQuamEUDiT:zoww5otXJ7vxyuaWD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: system
FileVersion: 1.00
CompanyName: B 4T0 Nk
Comments: I'm B 4T0 Nk
ProductName: b4tonk
ProductVersion: 1.00
OriginalFilename: system.exe

Razy.770988 also known as:

K7AntiVirus	Trojan ( 0040f6141 )
Lionic	Trojan.Win32.Blocker.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.StartPage1.14279
ClamAV	Win.Worm.Brontok-7065423-0
ALYac	Gen:Variant.Razy.770988
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Worm:Win32/Blocker.ffbb9680
K7GW	Trojan ( 0040f6141 )
Cybereason	malicious.8faa05
Baidu	Win32.Worm.VB.k
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/VB.DA
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Ransom.Win32.Blocker.hgnq
BitDefender	Gen:Variant.Razy.770988
NANO-Antivirus	Trojan.Win32.Regrun.xojuq
MicroWorld-eScan	Gen:Variant.Razy.770988
Tencent	Win32.Trojan.Blocker.Eaxo
Ad-Aware	Gen:Variant.Razy.770988
Sophos	ML/PE-A + Mal/StartP-A
Comodo	Worm.Win32.VB.DA@mk5
BitDefenderTheta	AI:Packer.DE27D9A21D
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	W32/Generic.worm.b
FireEye	Generic.mg.17e49be8faa05049
Emsisoft	Gen:Variant.Razy.770988 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.CFI.Gen
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Worm:Win32/Ludbaruma.A
Arcabit	Trojan.Razy.DBC3AC
GData	Gen:Variant.Razy.770988
AhnLab-V3	Worm/Win32.VB.R42952
McAfee	W32/Generic.worm.b
MAX	malware (ai score=85)
VBA32	Trojan.Regrun
Malwarebytes	Pioneer.Virus.FileInfector.DDS
Panda	Generic Malware
Rising	Worm.Ludbaruma!1.A308 (CLASSIC)
Yandex	Trojan.Regrun!L6fx665iyu0
Ikarus	Email-Worm.Win32.Brontok
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Worm.Ludbaruma.HwMAEpsA

How to remove Razy.770988?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Razy.770988 removal instruction