What is “Razy.847880 (B)”?

The Razy.847880 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.847880 (B) virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.847880 (B)?


File Info:
crc32: 79012674
md5: aee1919215c9f7d29dc4e09f1a864087
name: AEE1919215C9F7D29DC4E09F1A864087.mlw
sha1: 198566e91afe9158a1e4899012a70a2f83d83f5c
sha256: d796e620acae3b0c65e2b9226c3fe3726b5441c879ba622cbc46b68c997e3acc
sha512: d26f9d13390344de51ca6acbb1e37591637d62b3833e8f5f6e462b28e76a132d4ad240bdd2ab3f3fc2fbac646b1d5a57e8ed7626ee42d168cca64255d1b7401c
ssdeep: 6144:ZZJmUwNGzjS/h5uURcAORZb9UrThYmLkX3di93QPqfRpJ9AbfVptKTgSDje:DJmUwNGS5uURcFuL6QAyrzAb9ptKEw6
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: MAPI32
FileVersion: 1.0.2536.0 (win7sp1_ldr.160325-0600)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.23403
FileDescription: Extended MAPI 1.0 for Windows NT
OriginalFilename: MAPI32.DLL
Translation: 0x0409 0x04b0

Razy.847880 (B) also known as:

MicroWorld-eScan	Gen:Variant.Razy.847880
McAfee	Artemis!AEE1919215C9
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Riskware.Win32.Agent.ky
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.36405994
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	Trojan.Razy.DCF008
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Ad-Aware	Gen:Variant.Razy.847880
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
FireEye	Generic.mg.aee1919215c9f7d2
Emsisoft	Gen:Variant.Razy.847880 (B)
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Win32.Trojan-Spy.TrickBot.Z3GXS3
MAX	malware (ai score=88)
Cylance	Unsafe
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove Razy.847880 (B)?

Razy.847880 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X