Razy.820175 (B) information

The Razy.820175 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.820175 (B) virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Anomalous binary characteristics

How to determine Razy.820175 (B)?


File Info:
crc32: BC983CFF
md5: 69dfcd212bbc63f84d8c4d4e7f0b1b2f
name: 69DFCD212BBC63F84D8C4D4E7F0B1B2F.mlw
sha1: 7ad131bf48afed34814f5b986aee86f66ed834ff
sha256: cd498b2426b6783c4f1560b0db54783b4ec8b590db1a3bb23e1207263749ee28
sha512: 1cbd6b9fdd4b2b181beea93a245151b24b921a066874c6d8da26277cbd6297f3d638762c0026ff5aba5d2eb5ab54fe052691adaa19ffdc1a2fda0da7f356555e
ssdeep: 6144:tQHW1DoP0QHWkPUIFFMeLHEJ9ihYR0sRRpOHRD5yuuLpV0XY:txDXiFMyu9ihYRV8HRD5Hg0XY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: SpreadSheets
FileVersion: 1.00
CompanyName: Quercus
ProductName: SpreadSheets
ProductVersion: 1.00
FileDescription: Tickets for the Bole
OriginalFilename: SpreadSheets.exe

Razy.820175 (B) also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.820175
FireEye	Generic.mg.69dfcd212bbc63f8
McAfee	GenericRXAA-AA!69DFCD212BBC
Cylance	Unsafe
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Gen:Variant.Razy.820175
Rising	Trojan.Kryptik!1.C606 (CLASSIC)
Ad-Aware	Gen:Variant.Razy.820175
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Trickbot.jm
Emsisoft	Gen:Variant.Razy.820175 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan-Spy.TrickBot.OBF0DB
Kingsoft	Win32.Troj.Banker.(kcloud)
Arcabit	Trojan.Razy.DC83CF
Microsoft	Program:Win32/Wacapew.C!ml
BitDefenderTheta	Gen:NN.ZevbaF.34700.Mm0@aSfY6Dom
MAX	malware (ai score=86)
Malwarebytes	Trojan.Injector
ESET-NOD32	a variant of Win32/GenKryptik.EZGV
Ikarus	Trojan-Banker.TrickBot
eGambit	Unsafe.AI_Score_78%
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Razy.820175 (B)?

Razy.820175 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X