Razy.819256 (B) removal tips

The Razy.819256 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.819256 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Razy.819256 (B)?


File Info:
name: 146ABB3B04DB40A15C68.mlw
path: /opt/CAPEv2/storage/binaries/926b4ab7b53c8683b376329910080bcfa600586b6d533727e4e24da769501c20
crc32: 56F4330F
md5: 146abb3b04db40a15c68cb96d4282d57
sha1: d5ca323eca79e7ddfca554a5bd19015b1ea7fd13
sha256: 926b4ab7b53c8683b376329910080bcfa600586b6d533727e4e24da769501c20
sha512: 441633b4a020c3df55877464745610f0e416324a687f40662ddad3ccce15cd1d991bcda9934fb2febee42e510b6823bfb542b8fcb096a15edeb9e37aee8edd55
ssdeep: 12288:nYVYBf0fKWgEgKSg3xksXtBlXKfdedL4+3A65usT852ynFVY2:YuBYB/OVZ5jVY2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11215A6243BE62069F377FF75AED07497B72AB1232601A4D91D92234A8637911DDC2C3E
sha3_384: 96e0d84e42b48c4fb98eb4112db6ffac41e4943ecb5950c1a0b8c67f37d30dc8e133f4ba1e6ff4eea3ea5805e8a494a0
ep_bytes: ff2500204000302f4832525034787a5a
timestamp: 2090-06-20 02:30:48

Version Info:
Translation: 0x0000 0x04b0
Comments: NoTrial
CompanyName: https://allkey.org
FileDescription: Allkeys
FileVersion: 1.1.2210.2021
InternalName: Allkeys.exe
LegalCopyright: NoTrial ©  2021
LegalTrademarks: 
OriginalFilename: Allkeys.exe
ProductName: FREE GAMES
ProductVersion: 1.1.2210.2021
Assembly Version: 1.1.2210.2021

Razy.819256 (B) also known as:

Lionic	Trojan.Win32.Razy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.819256
FireEye	Generic.mg.146abb3b04db40a1
McAfee	GenericRXND-PF!146ABB3B04DB
Malwarebytes	Malware.AI.4148710423
Sangfor	Suspicious.Win32.Razy.819256
CrowdStrike	win/malicious_confidence_60% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34182.2m0@ay005An
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R007C0PAH22
Paloalto	generic.ml
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Razy.819256
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Razy.819256 (B)
TrendMicro	TROJ_GEN.R007C0PAH22
McAfee-GW-Edition	GenericRXND-PF!146ABB3B04DB
Sophos	Generic ML PUA (PUA)
MaxSecure	Trojan.Malware.300983.susgen
MAX	malware (ai score=84)
GData	Gen:Variant.Razy.819256
AhnLab-V3	Trojan/Win32.CoinMiner.R369698
ALYac	Gen:Variant.Razy.819256
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:O3swth+Ls1j45aS2MgpxZw)
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Cybereason	malicious.b04db4
Panda	Trj/CI.A

How to remove Razy.819256 (B)?

Razy.819256 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X