Razy.781410 malicious file

The Razy.781410 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.781410 virus can do?

How to determine Razy.781410?


File Info:
crc32: 516A8EBB
md5: 636fdab56c1c87ccb8375683ab497169
name: 636FDAB56C1C87CCB8375683AB497169.mlw
sha1: af4baf665f60f607c0876d6e6ac156554f7890c3
sha256: 8f6cb624152032db456d911cd970921169bd4c023343092c4576b04fce4408ab
sha512: db172f409cdc2046d15384007153e25b05516036da01923320f7964980b54bb9df2a58d3221a1c5d373f0edf89e6267f639d15148db1cada6704723642c28c14
ssdeep: 6144:nwpo54scz2ka9Rb+wMEyxhMYjvLu6LST/65Hg:P4svkhwMEyvMYjLu6LST/65H
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 1.0.0.0
InternalName: test.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft Corporation
Comments: Host Process for Windows Services
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 1.0.0.0
FileDescription: svchost.exe.mui
OriginalFilename: test.exe

Razy.781410 also known as:

K7AntiVirus	Trojan ( 002d0e251 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.781410
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Blocker.75dafa08
K7GW	Trojan ( 002d0e251 )
Cybereason	malicious.56c1c8
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.MK
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	Trojan-Ransom.Win32.Blocker.jwqf
BitDefender	Gen:Variant.Razy.781410
NANO-Antivirus	Trojan.Win32.Blocker.iauurx
MicroWorld-eScan	Gen:Variant.Razy.781410
Tencent	Win32.Trojan.Blocker.Wncx
Ad-Aware	Gen:Variant.Razy.781410
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34608.an3@aKZZkKi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.636fdab56c1c87cc
Emsisoft	Gen:Variant.Razy.781410 (B)
SentinelOne	Static AI – Malicious PE
Avira	BDS/Backdoor.Gen
Microsoft	Trojan:Win32/Skeeyah.A!rfn
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.Razy.781410
McAfee	Artemis!636FDAB56C1C
MAX	malware (ai score=88)
VBA32	CIL.StupidPInvoker-1.Heur
Malwarebytes	Malware.AI.524137461
Panda	Trj/CI.A
Rising	Backdoor.FireSale!1.CB09 (CLOUD)
Ikarus	Virus.ILCrypt
Fortinet	MSIL/Agent.MK!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgIASOsA

How to remove Razy.781410?

Razy.781410 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X