How to remove “Razy.989831”?

The Razy.989831 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.989831 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Razy.989831?


File Info:
name: 45F8B64DF60E392C24A3.mlw
path: /opt/CAPEv2/storage/binaries/65a18a5993076108854123f6216c67d01fa113e2c070025ac382c42cb888337e
crc32: 3B8867E9
md5: 45f8b64df60e392c24a3cecaa347baf8
sha1: b63e3babcd0fbee3c188918c8ab41c302dbd9e77
sha256: 65a18a5993076108854123f6216c67d01fa113e2c070025ac382c42cb888337e
sha512: b70f83939611dded9cd053e46ac9096986b6621e5bd5cdb86baaa09408851d0cd871a913bff427ed0d0554a3b420141260bdf89ad4332420777e389dfb9cf2a9
ssdeep: 3072:FF9n3lZRTaYukOpzBZBHubGODb6+TPyvi7/U:FLXRTvczBZBHwDDUKM
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T13EE35D0FE0A750FCC557C13486AAE232F631BC5525307A7F27A8FA712EB1E90671A725
sha3_384: a3be3b29ccd0a1c900a1e8b2384b4f213955a545c7ffdbbe7fc4224c9672eb2430478d41f6bc76bab59f2ad3bc98e4e8
ep_bytes: 4883ec28488d0d653c0100e890360100
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Razy.989831 also known as:

Lionic	Trojan.Win32.Razy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.989831
ALYac	Gen:Variant.Razy.989831
Zillya	Trojan.ExexSC.Win32.17
Alibaba	Exploit:Application/ShellCode.ac99af85
Cybereason	malicious.bcd0fb
Cyren	W64/Agent.DNO.gen!Eldorado
Symantec	Trojan.Gen.MBT
BitDefender	Gen:Variant.Razy.989831
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Razy.989831
Emsisoft	Gen:Variant.Razy.989831 (B)
Baidu	Win32.Worm.Agent.u
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Gen:Variant.Razy.989831
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Ransom.Win64.Wacatac.sa
Arcabit	Trojan.Razy.DF1A87
GData	Gen:Variant.Razy.989831
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4785501
McAfee	RDN/Generic.grp
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R002H09KJ21
Ikarus	Exploit.ShellCode
Fortinet	W64/Autorun.EV!tr
AVG	Win64:Malware-gen

How to remove Razy.989831?

Razy.989831 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X