Razy.989236 removal instruction

The Razy.989236 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.989236 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Razy.989236?


File Info:
name: C6367987AD09CA28D3E2.mlw
path: /opt/CAPEv2/storage/binaries/50143318c717fffa378ec2e9cc7e4a212f16a0ce7e36f4560f7b367cc0f6d24f
crc32: 675657F8
md5: c6367987ad09ca28d3e2f3982ec91995
sha1: cb30eb591684e72b539b790ddcccb33dcb4f44a5
sha256: 50143318c717fffa378ec2e9cc7e4a212f16a0ce7e36f4560f7b367cc0f6d24f
sha512: 994ae0f6f7ef9bdf5180198d76fe456dbd4394d9a671288e0af9ee4fdf3df142d848ccf048da6114b86179ea72e05ed0479b8f49281910f065b58d22851b5b53
ssdeep: 768:IeTLadhL+wlrqqhQhlel1Y8pOX7DBT2ARo:IePMJlrPQ5Xp2ARo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163F2084173F9544BEBEA87B60A726840673B7E0B553AD69C1C89208E4DB6B41C3D3B27
sha3_384: a799142cb3d763de162739acf1ec55eaf014dd61548e371d854ad0aae2df277acae3d553c01ce70a135f9de694cb1ebf
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-03 23:39:23

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Microsoft
FileDescription: WindowsFormsApplication1
FileVersion: 1.0.0.0
InternalName: server.exe
LegalCopyright: Copyright © Microsoft 2021
OriginalFilename: server.exe
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Razy.989236 also known as:

MicroWorld-eScan	Gen:Variant.Razy.989236
FireEye	Generic.mg.c6367987ad09ca28
McAfee	Artemis!C6367987AD09
Cylance	Unsafe
Alibaba	TrojanSpy:Win32/MalwareX.0911fda9
BitDefenderTheta	Gen:NN.ZemsilF.34084.cm0@aO5cSBi
Cyren	W32/MSIL_Agent.JV.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H0CL821
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.MSIL.Agent.gen
BitDefender	Gen:Variant.Razy.989236
Avast	Win32:MalwareX-gen [Trj]
Tencent	Msil.Trojan-spy.Agent.Swug
Emsisoft	Gen:Variant.Razy.989236 (B)
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
APEX	Malicious
Avira	TR/Spy.Agent.kgoir
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Razy.989236
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.989236
Malwarebytes	Trojan.Crypt.MSIL.Generic
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Razy.989236?

Razy.989236 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X