Razy.790339 removal

The Razy.790339 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.790339 virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Razy.790339?


File Info:
name: E4B3DCC3283A4B355F45.mlw
path: /opt/CAPEv2/storage/binaries/7b1e927dcfb57e803162d95ffe3997320daecfb097adbd9296c594da5dd4ce43
crc32: FA86F974
md5: e4b3dcc3283a4b355f458a939d56d111
sha1: 0b6fe0d0035fc76dd64ef54c1179f0e8b1d43f24
sha256: 7b1e927dcfb57e803162d95ffe3997320daecfb097adbd9296c594da5dd4ce43
sha512: 92ac3004ffb01f807cff83962ea95e72826f32e8e4abe0eeac8c083cca0e77bc72eea584370226895012b18cf4c0fb79c68f818859320429e2a0b7123cfe1679
ssdeep: 1536:gBfRSyWHkVfgk6+L5i6qt099999999999999999999999999999999999999999i:gBfRSyMMocpEypIkM5zwvW+8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T112540D40A111ACA7D6F85DBA204398754345BE907EDDF7062E287E9A1B72DC384F836F
sha3_384: 1a0e5c61353c475b0b0fb8545c128c8d625783e40544cad031577213dfaf63331d6be7c6c890a8dc05756521418736de
ep_bytes: 68781b4400e8f0ffffff000000000000
timestamp: 2013-11-03 11:51:14

Version Info:
Translation: 0x0804 0x04b0
ProductName: 工程1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Z文件
OriginalFilename: Z文件.exe

Razy.790339 also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Razy.790339
FireEye	Generic.mg.e4b3dcc3283a4b35
ALYac	Gen:Variant.Razy.790339
Zillya	Downloader.VB.Win32.85586
BitDefender	Gen:Variant.Razy.790339
Cybereason	malicious.3283a4
Arcabit	Trojan.Razy.DC0F43
Symantec	Trojan.Gen.2
APEX	Malicious
NANO-Antivirus	Trojan.Win32.VB.crfanu
Rising	Trojan.Agent!1.9F52 (CLASSIC)
Ad-Aware	Gen:Variant.Razy.790339
Comodo	Malware@#3pht6bfpe4c1p
VIPRE	Gen:Variant.Razy.790339
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dm
Emsisoft	Gen:Variant.Razy.790339 (B)
Ikarus	Trojan.Win32.VB
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.9E
Kingsoft	Win32.Heur.KVMF49.hy.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.790339
Google	Detected
VBA32	TrojanDownloader.VB
Panda	Generic Malware
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/VB.HCAS!tr.dldr
BitDefenderTheta	Gen:NN.ZevbaF.34646.sm0@ambwoUab
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Razy.790339?

Razy.790339 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X