Should I remove “Razy.828087 (B)”?

The Razy.828087 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.828087 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Razy.828087 (B)?


File Info:
crc32: B34D3D88
md5: 0f0a62a26ae5b360dc556f3763c297eb
name: 0F0A62A26AE5B360DC556F3763C297EB.mlw
sha1: 2d6685f8bf818e5db8482fa3125e01cc84c87c0f
sha256: 16226fcf99c6d7af5233e3f9492f86ec6e7b5d36daf430126e9e134621671e59
sha512: 36c6a856c03965ec0ee6dd08f7f5e687cd878e72e0636d00871d4977e74743a198abbfaa03ed716076b2fb509b1fe012ec00775734585173ab73654478f8c8ce
ssdeep: 49152:kfsg6mQVjlgHD7ZYIqRGVkEk7UHlbk7UHl4YIqRGVk9:kfHt/1kEv9v6/1k9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyleft 1998-2016 by Don HO
InternalName: npp.exe
FileVersion: 7.71
CompanyName: Don HO don.h@free.fr
ProductName: Notepad++
ProductVersion: 7.71
FileDescription: Notepad++ : a free (GNU) source code editor
OriginalFilename: Notepad++.exe

Razy.828087 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.29773
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.828087
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.26ae5b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Satacom.H
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Gen:Variant.Razy.828087
MicroWorld-eScan	Gen:Variant.Razy.828087
Ad-Aware	Gen:Variant.Razy.828087
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.0f0a62a26ae5b360
Emsisoft	Gen:Variant.Razy.828087 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Agentb.hjz
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.828087
AhnLab-V3	Malware/Win32.RL_Generic.R363078
McAfee	Artemis!0F0A62A26AE5
MAX	malware (ai score=83)
Rising	Downloader.Satacom!8.113B5 (TFE:dGZlOgFvRkGAyEJY0A)
Ikarus	Trojan-Downloader.Win32.Satacom
Fortinet	W32/PossibleThreat
AVG	Win32:Trojan-gen
Qihoo-360	HEUR/QVM20.1.19BF.Malware.Gen

How to remove Razy.828087 (B)?

Razy.828087 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X