What is “Razy.985450”?

The Razy.985450 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.985450 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.985450?


File Info:
name: 4B468BE122F9D141A0A3.mlw
path: /opt/CAPEv2/storage/binaries/5557207a7df4f95d294617e418aa3967b31db6cd1acbbd92f85e8fbe73f92e4f
crc32: 7B6B8A6A
md5: 4b468be122f9d141a0a3884b404921cd
sha1: fb416c7997d67213407101367a6080d3886b212e
sha256: 5557207a7df4f95d294617e418aa3967b31db6cd1acbbd92f85e8fbe73f92e4f
sha512: 3f848558761bc04621994d836506d358460da4837954f08ae4eebc1eaa959b8fafa07af881260882a1ee486470ef3dce519172d3fab3e54b3f5a53402d05cd17
ssdeep: 12288:7wIEv5XD6SahzVCTCHCwIEv5XD6SLTYQe7sIAHszNS597n:iESOITGbESLTYQeFNS597n
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T16BD47D067BA046FAF0B7D0BE8966561EE6B274071720D3CB23714BA94F136D4993F3A1
sha3_384: 47051b2ad857e699af3029b0d832d8151160ee505c82ba4b67f154eb9f3dc4ff3aa41e0c96e76058f8eaefbcbe9ac631
ep_bytes: f842000083c40c85c00f85a000000056
timestamp: 2021-02-19 13:48:07

Version Info:
0: [No Data]

Razy.985450 also known as:

MicroWorld-eScan	Gen:Variant.Razy.985450
FireEye	Gen:Variant.Razy.985450
ALYac	Gen:Variant.Razy.985450
Alibaba	Trojan:Win32/Shodi.d91abbc1
Cyren	W64/Shohdi.C.gen!Eldorado
ClamAV	Win.Trojan.FuBu-1
BitDefender	Gen:Variant.Razy.985450
Avast	Win32:Shodi
Ad-Aware	Gen:Variant.Razy.985450
Emsisoft	Gen:Variant.Razy.985450 (B)
DrWeb	Win32.HLLP.Shohdi.61457
McAfee-GW-Edition	BehavesLike.Win64.RansomRyuk.jh
GData	Gen:Variant.Razy.985450
Antiy-AVL	Trojan/Generic.ASMalwS.34C7FF4
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!4B468BE122F9
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H09KN21
Ikarus	HLLP.Win32.Shodi
Fortinet	W64/Razy.9701I!tr
AVG	Win32:Shodi

How to remove Razy.985450?

Razy.985450 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X