Malware

Razy.920046 removal guide

Malware Removal

The Razy.920046 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.920046 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid

Related domains:

wpad.local-net

How to determine Razy.920046?


File Info:

name: E23082B6EE819ECD013F.mlw
path: /opt/CAPEv2/storage/binaries/b477a1ac50162bab5ae2b3d9ca4a56542d4ec1ee5e771cbc1ba6f2f8b7307b18
crc32: B3A06445
md5: e23082b6ee819ecd013f3e510a240008
sha1: 5692284f6dcf51c5e789a4a64989767abe292e74
sha256: b477a1ac50162bab5ae2b3d9ca4a56542d4ec1ee5e771cbc1ba6f2f8b7307b18
sha512: 440db19a0bcfb581531728dda595368c09087b30a6542358feac600063d2f7c2bde6696c8f5ee5fd89b8e7e7a28da2207f5062780ad260d6609af8e49ce8b1c9
ssdeep: 96:ztv7hZDKH7SWepUZnZl3BGyT+pUZnoGgFLURhUZn:hESPknZ6Fknbo+kn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T147B1311601FC6DFACD5A16F85833D24521B0836499A1E11CEAABDCDECDACD6944E222B
sha3_384: f96f2e7ed3e32b78c6a362f9ae72e35a2207938558006e18d5c60723647a0a147915b8a961252d36167febdd998beac4
ep_bytes: 534e4453414c6173744f626a52656d6f
timestamp: 2008-04-19 11:49:11

Version Info:

0: [No Data]

Razy.920046 also known as:

BkavW32.AIDetect.malware1
LionicVirus.Win32.Lamer.n!c
MicroWorld-eScanGen:Variant.Razy.920046
FireEyeGeneric.mg.e23082b6ee819ecd
ALYacGen:Variant.Razy.920046
K7AntiVirusTrojan ( 004bcce41 )
AlibabaVirus:Win32/Lamer.122c6aa5
K7GWTrojan ( 004bcce41 )
BitDefenderThetaGen:NN.ZexaF.34062.amW@a0A48Fd
CyrenW32/Agent.DNO.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0RKN21
KasperskyVirus.Win32.Lamer.ks
BitDefenderGen:Variant.Razy.920046
AvastFileRepMalware
Ad-AwareGen:Variant.Razy.920046
EmsisoftGen:Variant.Razy.920046 (B)
ComodoPacked.Win32.MUPX.Gen@24tbus
TrendMicroTROJ_GEN.R002C0RKN21
McAfee-GW-EditionBehavesLike.Win32.Generic.zm
SophosMal/Generic-R + Mal/HckPk-A
IkarusTrojan.Crypt
GDataGen:Variant.Razy.920046
AviraTR/Patched.Ren.Gen
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Tiggre!rfn
CynetMalicious (score: 100)
McAfeeGenericRXAA-FA!E23082B6EE81
MAXmalware (ai score=80)
APEXMalicious
RisingTrojan.Generic@ML.94 (RDML:FdckkcIilw+1UOb8u3b+CQ)
SentinelOneStatic AI – Malicious PE
FortinetW32/Agent.E970!tr
AVGFileRepMalware
PandaGeneric Suspicious
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Razy.920046?

Razy.920046 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment