Should I remove “Razy.988368”?

The Razy.988368 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.988368 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Razy.988368?


File Info:
name: 998EFA638BFBA09D1F19.mlw
path: /opt/CAPEv2/storage/binaries/7a0f2e118d1356e508d6b4531b0e3d41819272383734840ec97213d241e46165
crc32: 4254F0AE
md5: 998efa638bfba09d1f1966b27cf39ee1
sha1: 5f0a8ea32c1c135c28b398c22ac0729b6f2f3dec
sha256: 7a0f2e118d1356e508d6b4531b0e3d41819272383734840ec97213d241e46165
sha512: ecfa85f3bb1d0fe559d07852e15498af927e081249a390c67a9e8e43faffcaaea15a389559163adf2cf883dae0a65c0a06747a2c1114feb441f5d5b1244f6fb1
ssdeep: 3072:prwcH4nFhE5Dj6MOtsUfD1rMLV2wYJDeSbP1GVr6RP9Y:prwDFhE5Dj61ENwaqPIV6h9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F6E37B40B21C4B6BC2BE55FA9020614247B1CA23765FEBDAADDDB4ED3ED3F500981297
sha3_384: 3d5aeb322f42bcfb418ad90779f2f51bb5a772f12146e79e4c0810357642ca275ae899ce642a8d51ac631cf651074d4f
ep_bytes: ff25002040005589e5578b7d106a0158
timestamp: 2020-12-15 14:38:22

Version Info:
Translation: 0x0000 0x04b0
Comments: CS:GO Cheat Loader
CompanyName: 
FileDescription: NSLoader
FileVersion: 1.0.0.0
InternalName: NSLoader.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: NSLoader.exe
ProductName: NSLoader
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Razy.988368 also known as:

Lionic	Trojan.Win32.Perseus.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.988368
FireEye	Gen:Variant.Razy.988368
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
Skyhigh	Artemis!Trojan
ALYac	Gen:Variant.Razy.988368
VIPRE	Gen:Variant.Razy.988368
BitDefender	Gen:Variant.Razy.988368
CrowdStrike	win/malicious_confidence_70% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36792.im0@autipto
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Emsisoft	Gen:Variant.Razy.988368 (B)
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=84)
Arcabit	Trojan.Razy.DF14D0
GData	Gen:Variant.Razy.988368
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4379668
McAfee	Artemis!998EFA638BFB
DeepInstinct	MALICIOUS
Ikarus	Trojan.MSIL.HackTool

How to remove Razy.988368?

Razy.988368 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X