Malware

Should I remove “Razy.775772”?

Malware Removal

The Razy.775772 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.775772 virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

How to determine Razy.775772?


File Info:

crc32: 461DE914
md5: ac12194bd3652cdb874961a08ceb9539
name: AC12194BD3652CDB874961A08CEB9539.mlw
sha1: d8a26e094d0f4cce202adc5a339e7bfabf6bd216
sha256: 85bd6d1baadfa735ee8c8865a92d1995e7bac7b07ebf441614de6d49089448fc
sha512: 283c9304140b26305170a3bfb09c71387ffbbd1848713fa857c0f15b7c413903b2b9363cf5f6ae062ed7b8cb0e92ff25b817a4f9b9f27cd5cb0cda1936f68dc1
ssdeep: 6144:7KMxrqxH6cd1b3QGLwUuxOd4RFxXGjjMvVCj/Go5NRV:EHrdpjq4GFxXGHMvVCrdfRV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 Headlight Software, Inc. All rights reserved.
InternalName: AdminPrivSetting.exe
FileVersion: 1.0.6.5
CompanyName: Headlight Software, Inc.
ProductName: (Shared by Headlight Software Products)
ProductVersion: 1.0.6.5
FileDescription: Change Settings that need Admin Privileges
OriginalFilename: AdminPrivSetting.exe
Translation: 0x0409 0x04e4

Razy.775772 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.775772
FireEyeGeneric.mg.ac12194bd3652cdb
ALYacGen:Variant.Razy.775772
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 00571f591 )
BitDefenderGen:Variant.Razy.775772
K7GWTrojan ( 00571f591 )
Cybereasonmalicious.94d0f4
CyrenW32/Trojan.JOAB-4997
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
ClamAVWin.Packed.Mint-9784350-0
KasperskyHEUR:Trojan-Banker.Win32.Qbot.vho
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Kryptik!1.CE73 (CLASSIC)
Ad-AwareGen:Variant.Razy.775772
EmsisoftGen:Variant.Razy.775772 (B)
DrWebTrojan.Inject4.4342
InvinceaML/PE-A + Troj/Agent-AJFK
McAfee-GW-EditionGenericRXMN-MU!AC12194BD365
MaxSecureWin.MxResIcn.Heur.Gen
SophosTroj/Agent-AJFK
IkarusTrojan.Win32.Gencbl
JiangminTrojan.Zenpak.dth
MAXmalware (ai score=87)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/Qakbot.AR!Cert
GridinsoftTrojan.Win32.Packed.oa!s2
ArcabitTrojan.Razy.DBD65C
SUPERAntiSpywareTrojan.Agent/Generic
ZoneAlarmHEUR:Trojan-Banker.Win32.Qbot.vho
GDataGen:Variant.Razy.775772
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Qakbot.R354641
Acronissuspicious
McAfeeGeneric Obfuscated.g
VBA32BScope.Trojan.Wacatac
MalwarebytesBackdoor.Qbot.Generic
ESET-NOD32a variant of Win32/Kryptik.HHDH
TencentMalware.Win32.Gencirc.10ce0fa5
SentinelOneStatic AI – Malicious PE
eGambitPE.Heur.InvalidSig
FortinetW32/Kryptik.HGKG!tr
BitDefenderThetaGen:NN.ZexaF.34590.tq1@aiyhj4ai
AVGWin32:BankerX-gen [Trj]
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360HEUR/QVM19.1.352F.Malware.Gen

How to remove Razy.775772?

Razy.775772 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment