Categories: Malware

Razy.151444 removal tips

The Razy.151444 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.151444 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Checks the version of Bios, possibly for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.151444?


File Info:
crc32: 5295E887md5: aea0bdfce70b1672c3b893d7bfa0b8a6name: AEA0BDFCE70B1672C3B893D7BFA0B8A6.mlwsha1: 64fa53adc333a6c2c80fab7be40e68893527d490sha256: 29a6e4f6f2480580a982c8c53593a121fd0a48fa0239966e3aea6ccd1f0f0d6bsha512: 870085a9652823d152878f5bb78c55a3e2b27552e5311da11e42e621c9483f41ad7ce1a35696db0d8faee32e43eb6ae3281072cec31d358c8306c13f20e863d4ssdeep: 24576:77uexBO0Q4blkBmXT2Ew2XFHjz5TBA8IMQ7mJz6Ho7YY7ToRt5GtMDIJ7OXZjl/R:77ZO4blZfXSbM8GKCYIoRqMDC7cZjY9Ctype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Ex76fex7f51x7edcx9a8cx8bc1 x7248x6743x6240x6709FileVersion: 1.0.0.0CompanyName: Ex76fex7f51x7edcx9a8cx8bc1Comments: Ex76fex7f51x7edcx9a8cx8bc1ProductName: Ex76fex7f51x7edcx9a8cx8bc1ProductVersion: 1.0.0.0FileDescription: Ex76fex7f51x7edcx9a8cx8bc1Translation: 0x0804 0x04b0

Razy.151444 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader30.26471
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Blackv
ALYac	Gen:Variant.Razy.151444
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Packed:Win32/NoobyProtect.9db1e185
K7GW	Unwanted-Program ( 004eb1401 )
K7AntiVirus	Unwanted-Program ( 004eb1401 )
TrendMicro	TROJ_GEN.R005C0PHA20
Cyren	W32/S-e743b39f!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Packed.NoobyProtect.G suspicious
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Noobyprotect-6622929-0
Kaspersky	HEUR:Packed.Win32.Blackv.gen
BitDefender	Gen:Variant.Razy.151444
NANO-Antivirus	Trojan.Win32.Blackv.erkvxd
MicroWorld-eScan	Gen:Variant.Razy.151444
Tencent	Win32.Packed.Blackv.Lqom
Ad-Aware	Gen:Variant.Razy.151444
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderTheta	Gen:NN.ZedlaF.34196.4z9@ayJYGAob
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
FireEye	Generic.mg.aea0bdfce70b1672
Sophos	Generic PUA GE (PUA)
SentinelOne	DFI – Malicious PE
Jiangmin	HackTool.Generic.bnf
Webroot	Pua.Gen
Antiy-AVL	Trojan[Packed]/Win32.Blackv
Microsoft	Trojan:Win32/Occamy.AB
Arcabit	Trojan.Razy.D24F94
ZoneAlarm	HEUR:Packed.Win32.Blackv.gen
GData	Win32.Riskware.NoobyProtect.B
AhnLab-V3	Malware/Win32.Generic.C1857451
Acronis	suspicious
McAfee	Packed-LF!AEA0BDFCE70B
MAX	malware (ai score=100)
VBA32	Trojan.Fuerboos
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R005C0PHA20
Rising	Malware.Undefined!8.C (TFE:3:QCQWcYQRE1C)
Yandex	Riskware.NoobyProtect!
Ikarus	PUA.NoobyProtect
eGambit	Unsafe.AI_Score_100%
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml