Razy.799718 (B) removal guide

The Razy.799718 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.799718 (B) virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task by a long amount of time.
Anomalous binary characteristics

How to determine Razy.799718 (B)?


File Info:
crc32: 1D83E16F
md5: ec6d01419cfc62372b5786c92a5cca57
name: EC6D01419CFC62372B5786C92A5CCA57.mlw
sha1: de9e85d525ad7defaeab056d925f8fd4455f5c73
sha256: ad5f307fc5e8c88458b1f2dfdfb0953edd7068c5756f8eadebbfff3ee12999ce
sha512: e21bc1d5cfaa653722f698ce7dba39df8eee797c83aa9c3a2cf798714aa271eae60878a52223e9c526af7897877ede54973ef49e6624462787ea778f9b2a9f04
ssdeep: 3072:VuX6AefalE7TAK6cMBSH9gd4QXEGFvbfU4P6s:lAey6AKv2V/FDMo
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: sppsvc
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: Microsoft Software Protection Platform Service
OriginalFilename: sppsvc.exe
Translation: 0x0409 0x04b0

Razy.799718 (B) also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.799718
FireEye	Generic.mg.ec6d01419cfc6237
ALYac	Gen:Variant.Razy.799718
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Gen:Variant.Razy.799718
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Ad-Aware	Gen:Variant.Razy.799718
Sophos	ML/PE-A + Mal/EncPk-APV
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Razy.799718 (B)
MAX	malware (ai score=85)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Wacatac.DA!ml
Gridinsoft	Malware.Win32.Pack.701!se
Arcabit	Trojan.Razy.DC33E6
GData	Gen:Variant.Razy.799718
Cynet	Malicious (score: 100)
McAfee	GenericRXMV-BF!EC6D01419CFC
VBA32	BScope.Backdoor.Qbot
ESET-NOD32	a variant of Win32/Kryptik.HHYG
Rising	Trojan.Kryptik!8.8 (TFE:2:uVNqqgA4Ji)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HDJM!tr
BitDefenderTheta	Gen:NN.ZedlaF.34670.ID8@aCVgfihi
Qihoo-360	HEUR/QVM40.1.B0EF.Malware.Gen

How to remove Razy.799718 (B)?

Razy.799718 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X