Should I remove “Razy.122286”?

The Razy.122286 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.122286 virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Injection with CreateRemoteThread in a remote process
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Uses Windows utilities for basic functionality
• Detects Sandboxie through the presence of a library
• Code injection with CreateRemoteThread in a remote process
• Sniffs keystrokes
• Executed a process and injected code into it, probably while unpacking
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Checks for the presence of known devices from debuggers and forensic tools
• Creates a copy of itself
• Creates known SpyNet mutexes and/or registry changes.

How to determine Razy.122286?

File Info:
crc32: 131E319D
md5: 732e45fd5708d2c1caef90e3ea73a026
name: 732E45FD5708D2C1CAEF90E3EA73A026.mlw
sha1: b273f4ae1163d31a08ea3249bcabdf0e7e3f0059
sha256: 28524887d5c9b6282139998bf915224fb09d66bcc5b7b28f43f78450193e8394
sha512: ccd51e1ed725f39b5f2bb8c1150245bed8db0a005d63222b8bc690029b95781dd6f5d73e173b9edc4a184bef7c6d928d56508cc9ee4b8391e5dbc9063967ffc2
ssdeep: 12288:BlzmTWEBMVYYa3ozbJ927ZPVodNq3A4Ly8a:8BMVTi29ytNe8a
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: STTT.exe
FileVersion: 1.0.0.0
ProductName: STTT
ProductVersion: 1.0.0.0
FileDescription: STTT
OriginalFilename: STTT.exe

Razy.122286 also known as:

How to remove Razy.122286?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.