Razy.980121 (B) removal

The Razy.980121 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.980121 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Razy.980121 (B)?


File Info:
name: A6EF8B9A34CF0E95FAD6.mlw
path: /opt/CAPEv2/storage/binaries/c8bae5f620a62ba1658b9b006e53384560c19a4595007e75250e49ddf033bf11
crc32: A8D1CBE8
md5: a6ef8b9a34cf0e95fad6e34b0d3ed957
sha1: c1f0712cd950da369909b5dbc2fc7948eca8ed23
sha256: c8bae5f620a62ba1658b9b006e53384560c19a4595007e75250e49ddf033bf11
sha512: 80d15b229a1e306d344b75e1be18fb70cb201ec5778f7395c6d61db7a8541b6e4908f15dcebcb337f72262c8c3ecb390808b023ee49fadc92fc0b0b483700010
ssdeep: 98304:aJho45UTJYgnvzuN4ptJho45UTJYgnvzuN4p8:ajp5QJ9tjp5QJ98
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T13896F807EBB510E0E1BAC1399563622BFDB138598734A7D787855B1A1F31BE0AE3E740
sha3_384: 5a9f48cc32ce4b63a83b10f594031b48b4a58c82dabe49dd9c997d0e4dd9bb7aa61f08f936a5aa674305d68f9364266e
ep_bytes: 4883ec28e8d7fdffff4883c428c3cccc
timestamp: 2017-11-26 07:47:37

Version Info:
0: [No Data]

Razy.980121 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.34514
MicroWorld-eScan	Gen:Variant.Razy.980121
FireEye	Generic.mg.a6ef8b9a34cf0e95
Zillya	Adware.ConvertAD.Win32.63631
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 00519d321 )
K7GW	Trojan ( 00519d321 )
Cybereason	malicious.a34cf0
ESET-NOD32	a variant of Win64/Agent.B
ClamAV	Win.Trojan.Miner-9878314-0
Kaspersky	not-a-virus:HEUR:RiskTool.Win64.Miner.gen
BitDefender	Gen:Variant.Razy.980121
Avast	Win64:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b16d9e
Ad-Aware	Gen:Variant.Razy.980121
Sophos	Generic ML PUA (PUA)
Emsisoft	Gen:Variant.Razy.980121 (B)
Ikarus	Worm.Win64.Agent
GData	Gen:Variant.Razy.980121
Jiangmin	TrojanDropper.Agent.cicc
Avira	HEUR/AGEN.1118495
Antiy-AVL	Trojan/Generic.ASMalwS.22FB743
Arcabit	Trojan.Razy.DEF499
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win64.Miner.R215527
ALYac	Gen:Variant.Razy.980121
MAX	malware (ai score=87)
Malwarebytes	Malware.AI.1225065349
APEX	Malicious
SentinelOne	Static AI – Malicious PE
AVG	Win64:MalwareX-gen [Trj]

How to remove Razy.980121 (B)?

Razy.980121 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X