What is “Razy.835442”?

The Razy.835442 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.835442 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Razy.835442?


File Info:
crc32: F4BF87DB
md5: 6a174bd8684741ef9acf1a08de59ff28
name: 6A174BD8684741EF9ACF1A08DE59FF28.mlw
sha1: f97ccb5955978f7927b5ddfad20d66463fb80751
sha256: 1df08248f5232721a3d22bbbb60009e5ef143f0f605fa8e6a0079da7c8847946
sha512: fb505ef3f9451daa225480ef05bcbd8da5c415174fa5d82b12885804b9ef0c75a220fde6f2e2f2c5ea92d04b8f25f6d839fc77f59a04673178379f4ef0deff26
ssdeep: 12288:pbDFCs3Ly4DKdATDrPuEbP4yQMFCs3LyCDKdATDrKuER:p3LEdASEbPFQMLedAjER
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018 MINCASOFT
Assembly Version: 0.9.16.0
InternalName: ViettelPayPro.exe
FileVersion: 0.9.16
CompanyName: M I N C A S O F T
LegalTrademarks: 
Comments: Tool nap tien qua ViettelPay KPP (Web version)
ProductName: Viettel Pay Pro
ProductVersion: 0.9.16
FileDescription: Viettel Pay Pro
OriginalFilename: ViettelPayPro.exe

Razy.835442 also known as:

Lionic	Trojan.Win32.Generic.4!c
ALYac	Gen:Variant.Razy.835442
Cylance	Unsafe
Sangfor	PUP.Win32.Presenoker.mt
Cybereason	malicious.868474
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.835442
MicroWorld-eScan	Gen:Variant.Razy.835442
Ad-Aware	Gen:Variant.Razy.835442
Sophos	Generic PUA PJ (PUA)
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Razy.835442
Emsisoft	Gen:Variant.Razy.835442 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DCBF72
GData	Gen:Variant.Razy.835442
McAfee	Artemis!6A174BD86847
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
Fortinet	W32/Generic!tr
AVG	FileRepMalware

How to remove Razy.835442?

Razy.835442 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X