Razy.136477 (file analysis)

The Razy.136477 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.136477 virus can do?

How to determine Razy.136477?


File Info:
crc32: 2FA123FA
md5: 18253cb12695b1a23f96a813d630ddb0
name: 18253CB12695B1A23F96A813D630DDB0.mlw
sha1: 92e5905c023bf6f7867af6ce8cbbde8a1ed6e86e
sha256: 302d4975e56111d8b30c1b047621c1950b36360577cb0d05ad8c1ad32686f2c2
sha512: d5079d26b4a58318db36399ca0534963af096caedf25945a7eaed7fb5c919dcf66118e4c5c2716fd40a18c0a0b6b9adc6c166d05872848b64782a5c4ed3be496
ssdeep: 6144:5+yNZ//Wp5W0sk2Mnd2+X9QJ3Y2NnwYzpYIk4xJjCQob1nfDPLd8H:dop5WPk2McmQyEla4HfYLL+H
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: turingmachine
Assembly Version: 1.3.0.0
InternalName: turingmachine.exe
FileVersion: 1.3.0.0
CompanyName: turingmachine
LegalTrademarks: turingmachine
Comments: turingmachine
ProductName: turingmachine
ProductVersion: 1.3.0.0
FileDescription: turingmachine
OriginalFilename: turingmachine.exe

Razy.136477 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader23.56616
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.136477
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.12695b
Cyren	W32/MSIL_Agent.BQE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.AFK
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
ClamAV	Win.Trojan.Generic-6898101-0
Kaspersky	HEUR:Backdoor.MSIL.Quasar.gen
BitDefender	Gen:Variant.Razy.136477
MicroWorld-eScan	Gen:Variant.Razy.136477
Tencent	Msil.Backdoor.Quasar.Dwth
Ad-Aware	Gen:Variant.Razy.136477
Sophos	Troj/Subti-A
BitDefenderTheta	Gen:NN.ZemsilF.34628.tm0@aysFE4e
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.18253cb12695b1a2
Emsisoft	Gen:Variant.Razy.136477 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1108475
eGambit	Trojan.Generic
Microsoft	Backdoor:MSIL/Quasar.GG!MTB
Arcabit	Trojan.Razy.D2151D
ZoneAlarm	HEUR:Trojan.MSIL.Quasar.gen
GData	Gen:Variant.Razy.136477
AhnLab-V3	Trojan/Win32.Hooker.R331578
McAfee	Artemis!18253CB12695
MAX	malware (ai score=87)
Malwarebytes	Backdoor.Quasar
Panda	Trj/GdSda.A
Rising	Backdoor.XRat!1.D01D (CLASSIC)
Ikarus	Trojan.MSIL.Agent
Fortinet	MSIL/Agent.BEU!tr
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Quasar.HgIASQ0A

How to remove Razy.136477?

Razy.136477 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X