Razy.841420 malicious file

The Razy.841420 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.841420 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings

How to determine Razy.841420?


File Info:
crc32: CC3994A9
md5: 0a1278a06a4d7bf4b0a152fccf9b8863
name: 0A1278A06A4D7BF4B0A152FCCF9B8863.mlw
sha1: 0908c23b283f3b4b361b24b2c6716c178d0cc6b3
sha256: e8048d57153281e57b4c3937346165aa89f802c9d17c34045b23d2f946817e40
sha512: 89d4776eeed59aebf209fbca578ac8f78dcd677d8c8e2de764755ad4771ce1308e35839aae1223fa13fdef96a1ec9b89b207f068cf22bf43586e0bcecfc73b3c
ssdeep: 12288:llXKhZVSOww88nuNgEGyKw9lQJm4Drh0XJWhPJjiHYgPa8BvxY:7yLwVROPXwH+Dt0gPJji9PNY
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2011 Sudden instant Corporation. All rights reserved
InternalName: Language.dll
FileVersion: 2.3.3.763 Applecatch
CompanyName: Sudden instant
Stretch: Happen silent
ProductName: Sudden instant Control think
ProductVersion: 2.3.3.763
FileDescription: Control think
OriginalFilename: Language.dll
Translation: 0x0409 0x04b0

Razy.841420 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.841420
FireEye	Generic.mg.0a1278a06a4d7bf4
Qihoo-360	Win32/Trojan.Kryptik.HgkASO0A
McAfee	GenericRXNP-UJ!0A1278A06A4D
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Razy.841420
K7GW	Trojan ( 00577a4f1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FBMH
Kaspersky	Trojan.Win32.Agent.xagjvr
Alibaba	Trojan:Win32/GenKryptik.4ee99d6b
AegisLab	Trojan.Win32.Agent.4!c
Avast	Win32:CrypterX-gen [Trj]
Tencent	Win32.Trojan.Agent.Eek
Ad-Aware	Gen:Variant.Razy.841420
Emsisoft	Trojan.Agent (A)
F-Secure	Trojan.TR/Kryptik.ugnbb
TrendMicro	TROJ_GEN.R002C0WBB21
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Krypt
Avira	TR/Kryptik.ugnbb
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DCD6CC
AhnLab-V3	Malware/Gen.Reputation.C4332695
ZoneAlarm	Trojan.Win32.Agent.xagjvr
GData	Gen:Variant.Razy.841420
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.841420
MAX	malware (ai score=80)
TrendMicro-HouseCall	TROJ_GEN.R002C0WBB21
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
eGambit	Unsafe.AI_Score_85%
Fortinet	W32/GenKryptik.FBMH!tr
AVG	Win32:CrypterX-gen [Trj]

How to remove Razy.841420?

Razy.841420 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X