Razy.964907 removal instruction

The Razy.964907 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.964907 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.964907?


File Info:
name: BEF8A967BF4FE8B781EC.mlw
path: /opt/CAPEv2/storage/binaries/ba36e82c439b8bf0d65307b65623ba19a1e77ea2cf91c75086d35bc7878ef5ac
crc32: 719AFED7
md5: bef8a967bf4fe8b781ec5dc6527642a6
sha1: 237d8fbe261ee3a834f2330bfb9d7f647a61ddc5
sha256: ba36e82c439b8bf0d65307b65623ba19a1e77ea2cf91c75086d35bc7878ef5ac
sha512: 309cb5a9dbaadf184f2752020ef2688ded04c04804cbdeb5a194bb83423012e5a1f98281ebc0bbba1c9e6a4fc1f7a2f1f679c2ba7f63ce59876ce6d496c084b8
ssdeep: 3072:W/ZfquNi7WoFvLXLPAa2Pok5z4ZGzcFOM+2opGODb1GODbQ7GhhJ44tx:W/FYWolE+k5kPFOM+tDVDUGhhRtx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T102147C02B6895075D9B304700ABAA272B93CBE72072596DF67A8DD251FB07D17B303B7
sha3_384: b6c09e11c055e7ef6c2866e9c528a2dda9319382cfa33ed3d0388b06f31dd33bb6766d33d83a6e3b4ed425c2a08e01e4
ep_bytes: e874060000e97afeffff558becf64508
timestamp: 2016-06-04 12:46:39

Version Info:
0: [No Data]

Razy.964907 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Razy.4!c
MicroWorld-eScan	Gen:Variant.Razy.964907
FireEye	Gen:Variant.Razy.964907
ALYac	Gen:Variant.Razy.964907
Sangfor	Suspicious.Win32.Save.a
Symantec	ML.Attribute.HighConfidence
BitDefender	Gen:Variant.Razy.964907
NANO-Antivirus	Trojan.Win32.Pajetbin.ixsrfv
Ad-Aware	Gen:Variant.Razy.964907
Zillya	Trojan.Scar.Win32.142585
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Razy.964907 (B)
Ikarus	Trojan.Win32.Rbot
GData	Gen:Variant.Razy.964907
Jiangmin	Trojan.Generic.gzwwt
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Generic.ASMalwS.3392F25
ViRobot	Trojan.Win32.Z.Razy.193864.B
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!BEF8A967BF4F
TrendMicro-HouseCall	TROJ_GEN.R002H09KP21
SentinelOne	Static AI – Suspicious PE
Fortinet	Malicious_Behavior.SB
MaxSecure	Trojan.Malware.300983.susgen

How to remove Razy.964907?

Razy.964907 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X