Malware

Razy.987962 removal tips

Malware Removal

The Razy.987962 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.987962 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Razy.987962?


File Info:

crc32: 7DB87EF7
md5: 133b2635684c0ed6170099b8aa46044c
name: 133B2635684C0ED6170099B8AA46044C.mlw
sha1: b7dfbb930b6ef431714aec8f166aff1200e31063
sha256: 489c8be7126a5b724ad696451d925fe177b2ab7242b2c81d353af05c0f91dc93
sha512: 0e567f189dc40ee3fc50260d1fc02c43533e2c0d1a14d5f238e3dfaeba645df39098f115fa71eb3a77ecbdeb28b25ceb54ad61b2aca1689ab11af47147d7a4ca
ssdeep: 12288:a9HVmB3qMJyehqiUp9HoLRBpclAyQpzgotkZ18k1LL0S:a9HV+3LOiUuHplbzeZ18k3
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.1.3
InternalName: SafeFindHand.exe
FileVersion: 1.0.1.3
CompanyName: InfiniteLoop.IR
LegalTrademarks:
Comments:
ProductName: WinHostsManager
ProductVersion: 1.0.1.3
FileDescription: WinHostsManager
OriginalFilename: SafeFindHand.exe

Razy.987962 also known as:

K7AntiVirusTrojan ( 00589ee41 )
LionicTrojan.MSIL.Noon.l!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.35962
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.987962
CylanceUnsafe
SangforTrojan.MSIL.Noon.gen
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Kryptik.d1064ff2
K7GWTrojan ( 00589ee41 )
SymantecTrojan.Gen.9
ESET-NOD32a variant of MSIL/Kryptik.ADJU
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
KasperskyHEUR:Trojan-Spy.MSIL.Noon.gen
BitDefenderGen:Variant.Razy.987962
MicroWorld-eScanGen:Variant.Razy.987962
Ad-AwareGen:Variant.Razy.987962
SophosMal/Generic-S
Comodo.UnclassifiedMalware@0
BitDefenderThetaGen:NN.ZemsilF.34266.Cm0@ayi8qVj
TrendMicroTROJ_GEN.R002C0WK621
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGen:Variant.Razy.987962
EmsisoftGen:Variant.Razy.987962 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Kryptik.tuwzc
MicrosoftTrojan:Win32/AgentTesla!ml
GDataMSIL.Trojan.PSE.IB4YD3
AhnLab-V3Trojan/Win.AgentTesla.C4753953
McAfeeRDN/Generic PWS.y
MAXmalware (ai score=100)
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0WK621
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.FNAJ!tr
AVGWin32:CrypterX-gen [Trj]
Paloaltogeneric.ml

How to remove Razy.987962?

Razy.987962 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment