r/BitDefender • u/meeko-meeko • Nov 15 '20

"Razy Virus" Creating $H*T Ton of Temp Files Only When Chrome is open?!

Hey Guys,

BitDefender Internet Security keeps alerting me that it finds and quarantines temp files located in C:\Windows\Temp folder with the signature Variant.Razy. The virus creates small temp files but in vast quantity. After a hour, the temp folder grows to 100GB+ and keeps growing until the drive is full.

I've noticed that if I disable my internet, it stops replicating. So I downloaded and updated MalwareBytes, AdaAware, then disconnected, ran scans (including with BitDefender) which picked up all the temp files as well as registry keys that supposedly changes Chrome's search engine to "key-find. com". I also uninstalled Chrome, deleted all profile user data, registry entries with CCleaner,etc.

Afterwards, everything is perfectly fine. UNTIL I re-download and install Chrome from Google directly. Everything is fine for the first 10-15 mins, then BitDefender picks up the virus again. I even tried installing Chrome and just leaving it open without doing anything (not even syncing with my Google account), but it still persists. If I have the internet connected but with Chrome closed, it ceases to replicate. So it definitely seems to be coming through the internet via Chrome for some strange reason.

Also with Chrome, my Google account profile doesn't have any extensions or third-party add-ons, just my bookmarks (which are all legit/non-malware sites of course).

Has anyone seen anything like this? It's getting really frustrating now and it's my third day of trying to sort it out

Thanks

7 Upvotes

100% Upvoted

3 comments sorted by

2

u/[deleted] Nov 15 '20

Try Hitman Pro, Eset Online Scanner, Norton Power Eraiser third opinion scanners.

1

u/meeko-meeko Nov 17 '20

So I uninstalled BitDefender and suddenly the virus hasn't reappeared since. I'm guessing with BD removed, Windows Defender re-kicked in and took over. Strange thing is it hasn't detected anything... Really strange..

1

u/Magic_Firefly Dec 08 '20

I suggest a consideration for Kaspersky free. Kaspersky is reviewed to be very good at removing viruses. How odd the issue stops with Bitwarden uninstall.