Should I remove “Razy.986120 (B)”?

The Razy.986120 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.986120 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.986120 (B)?


File Info:
name: 7E84A7F8FE45C0604111.mlw
path: /opt/CAPEv2/storage/binaries/ae87f152193cb12669404012001a8e8ddba8c8428f566c38843d45e21d8e92cc
crc32: DBBF2A8C
md5: 7e84a7f8fe45c06041111eadfca527b1
sha1: 1a1d37a15cb11cc2b5920d0540e8c7e29f3a1688
sha256: ae87f152193cb12669404012001a8e8ddba8c8428f566c38843d45e21d8e92cc
sha512: d504207f6ed14474ce350122cdba7a4e926a6885cb07cf81db50c03e39f877d28dad9be35e8757c53dd759d141c529ac71112eb24927e543661def1201ffd522
ssdeep: 12288:sFsMfvSgcCD4aj4qk3GDQhaM45OzaLksWbDPYo4IYo4IYo4IYo4vjZahBj:sFsMfvSsD4aj46Ds4pLjWbDGZahBj
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T18CD44B16E3A26868CC12C1B64ADA6373BB25F41B6532BF5E2750CB342F61D586339F31
sha3_384: 3b79fc9f8eec1741de8c517f4ae4a1ec71c4f7698978d2f3c451c566324bf32d7ec648790f9a11a5bb42e1a31982f6f7
ep_bytes: 4883ec28488d0df5010500e800fc0400
timestamp: 1970-01-01 00:00:00

Version Info:
CompanyName: The OpenSSL Project, https://www.openssl.org/
FileDescription: OpenSSL application
FileVersion: 1.1.1f
InternalName: openssl
OriginalFilename: openssl
ProductName: The OpenSSL Toolkit
ProductVersion: 1.1.1f
LegalCopyright: Copyright 1998-2020 The OpenSSL Authors. All rights reserved.
Translation: 0x0409 0x04b0

Razy.986120 (B) also known as:

Lionic	Trojan.Win32.Razy.4!c
MicroWorld-eScan	Gen:Variant.Razy.986120
FireEye	Gen:Variant.Razy.986120
ALYac	Gen:Variant.Razy.986120
Zillya	Worm.AutoRun.Win32.177457
Cyren	W32/Cerbu.AQ.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R002H09KN21
BitDefender	Gen:Variant.Razy.986120
Ad-Aware	Gen:Variant.Razy.986120
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Razy.986120 (B)
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.349D49E
Gridinsoft	Ransom.Win64.Sabsik.sa
GData	Gen:Variant.Razy.986120
McAfee	Artemis!7E84A7F8FE45

How to remove Razy.986120 (B)?

Razy.986120 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X