Razy.913371 malicious file

The Razy.913371 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.913371 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Razy.913371?


File Info:
crc32: 4DD1EA9C
md5: b4ee5e27a9f0fac95245ac9a97777f6b
name: B4EE5E27A9F0FAC95245AC9A97777F6B.mlw
sha1: a5fb8f3408713d3cb523aac9cdc6363591e29df7
sha256: a92d3e6347f89dc1d12cc23fc878033788f482bb49c4f9816d4e75e0a9c56890
sha512: cd49924d75bc3dab31cfda86696b2c1fafdf26a0724a61538136878e1549e5a5a653f450744d4dd7b8da2ee7823da2257b355abc6d8b825ae59b2a0afd7f311a
ssdeep: 1536:8j8PZQ0NLyTST6RGFohj3zjfvLHCky6aZm0r8RQjwBp7msPqTr0:Y0QHT060G93zjfvLHdypm0ARQEBp7m3g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 1988-2000 Microsoft Corp. All rights reserved.
InternalName: verswitch
FileVersion: 2000.080.0194.00
CompanyName: Microsoft Corporation
LegalTrademarks: Microsoftxae x662f Microsoft Corporation x7684x6ce8x518cx5546x6807x3002Windows(TM) x662f Microsoft Corporation x7684x6ce8x518cx5546x6807
ProductName: Microsoft SQL Server
ProductVersion: 8.00.194
FileDescription: SQL Server x7248x672cx5207x6362x5b9ex7528x5de5x5177
OriginalFilename: vswitch.exe
Translation: 0x0804 0x04b0

Razy.913371 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.913371
Cylance	Unsafe
Sangfor	Trojan.Win32.Generic.ky
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Virut.976c82e3
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.408713
Cyren	W32/Virut.AM.gen!Eldorado
APEX	Malicious
Avast	Win32:Vitro [Inf]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.913371
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Variant.Razy.913371
Tencent	Win32.Trojan.Generic.Phgo
Ad-Aware	Gen:Variant.Razy.913371
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34266.gu0@aqwsDQdb
TrendMicro	TROJ_GEN.R002C0WHP21
McAfee-GW-Edition	BehavesLike.Win32.Virut.nm
FireEye	Generic.mg.b4ee5e27a9f0fac9
Emsisoft	Gen:Variant.Razy.913371 (B)
Jiangmin	Trojan.Generic.hajhv
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.913371
McAfee	Artemis!B4EE5E27A9F0
MAX	malware (ai score=89)
VBA32	Trojan.Sabsik.FL
TrendMicro-HouseCall	TROJ_GEN.R002C0WHP21
Yandex	Trojan.GenAsa!gVHZ2hPdqJM
Fortinet	W32/CoinMiner.F
AVG	Win32:Vitro [Inf]

How to remove Razy.913371?

Razy.913371 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X