Razy.987985 malicious file

The Razy.987985 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.987985 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.987985?


File Info:
name: 6F67E0115C3AD3CF0E7D.mlw
path: /opt/CAPEv2/storage/binaries/940d27ec1e3af961355c76bfbe92df19d429db83036f7b3cc21c528ab35738b9
crc32: F887BF30
md5: 6f67e0115c3ad3cf0e7dab54c6b295d6
sha1: 2eb8f82eff224f9aae0608f3d4723e708b547474
sha256: 940d27ec1e3af961355c76bfbe92df19d429db83036f7b3cc21c528ab35738b9
sha512: 665cd027c4e97f55c42a630f5880af9f6ec5bed7d6e1a52e589be2e1c1aee3b441213e65235ca2d48d1ec9e5ca38d2a477026d081aeede2d0bae9d6791b6eb0a
ssdeep: 768:itcteRcqyrj3ildC6+aYxJLDAKKKKKKKKKKozuWQbKSKqugA0GQhkgdyRbQKN2ho:Wcthqpld/lgJwWkKqugA0GQOpQREEe
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T185337E0FD993C0B1C040C1745EBFD636F773B92615292AAAB768CAF46F789C1622C85D
sha3_384: 888e408de402cff0c3230a1198f0a60c929921ded749098294e1d1dea6da0bf1455be1036120249b0a31248d9e99737b
ep_bytes: 4883ec28488d0d75290000e890230000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Razy.987985 also known as:

MicroWorld-eScan	Gen:Variant.Razy.987985
FireEye	Gen:Variant.Razy.987985
McAfee	Exploit-DcomRpc.g.gen
Cylance	Unsafe
Baidu	Win32.Worm.Agent.u
ClamAV	Win.Exploit.Shellcode-1
BitDefender	Gen:Variant.Razy.987985
Avast	Win32:DCom-AA [Expl]
Ad-Aware	Gen:Variant.Razy.987985
McAfee-GW-Edition	Exploit-DcomRpc.g.gen
Emsisoft	Gen:Variant.Razy.987985 (B)
GData	Gen:Variant.Razy.987985
Avira	EXP/ShellCode.I
Antiy-AVL	Trojan/Generic.ASMalwS.34C8292
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.987985
MAX	malware (ai score=88)
Ikarus	Exploit.ShellCode
MaxSecure	Trojan.Win32.Gen
AVG	Win32:DCom-AA [Expl]

How to remove Razy.987985?

Razy.987985 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X