Malware

Razy.168197 (file analysis)

Malware Removal

The Razy.168197 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Razy.168197 virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Anomalous binary characteristics

How to determine Razy.168197?



File Info:

crc32: D545EBC0
md5: 5a385bfcdeb9ac9bf984b1f634e9b712
name: 5A385BFCDEB9AC9BF984B1F634E9B712.mlw
sha1: e869bbd91e2c2d8bb0c399983e4243f9c7ab740b
sha256: 267f46464118712334f5b62b0b0e58eeb8bbd02ff7e6e51f99d74f45a9c38bdf
sha512: d96d74eb280237464a0b4dd8cda13f30f47cc2ba9c086d0efe346fdadb3186c741183413ab178f0c48cdba3732c90a8d5bf377f866d55e1e3d1b221313bbedd8
ssdeep: 3072:53vUDhwKbTHkmBV4XgjxEufVU0TbTyDDalba3vUDhwKbTHkmBV4t:ckmmdufVUNDa9kmM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 1.0.3831.16025
InternalName: dmpk.exe
FileVersion: 1.0.3831.16025
ProductVersion: 1.0.3831.16025
FileDescription:  
OriginalFilename: dmpk.exe

Razy.168197 also known as:

MicroWorld-eScanGen:Variant.Razy.168197
Qihoo-360Win32/TrojanDropper.Generic.HgIASOsA
ALYacGen:Variant.Razy.168197
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforTrojan.Win32.Save.a
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Razy.168197
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.cdeb9a
CyrenW32/S-d45e5a2c!Eldorado
SymantecW32.Gosys
APEXMalicious
AvastWin32:VB-OJQ [Wrm]
KasperskyUDS:DangerousObject.Multi.Generic
AlibabaTrojan:Win32/Blocker.afdc4f19
NANO-AntivirusTrojan.Win32.Razy.epaeep
RisingDropper.Generic!8.35E (CLOUD)
Ad-AwareGen:Variant.Razy.168197
EmsisoftGen:Variant.Razy.168197 (B)
F-SecureTrojan.TR/Dropper.Gen
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
FireEyeGeneric.mg.5a385bfcdeb9ac9b
SophosMal/Generic-S
IkarusTrojan-Ransom.Blocker
AviraTR/Dropper.Gen
MicrosoftTrojan:Win32/Dynamer!ac
ArcabitTrojan.Razy.D29105
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Variant.Razy.168197
CynetMalicious (score: 85)
ESET-NOD32a variant of Generik.EYUOVGF
McAfeeArtemis!5A385BFCDEB9
MAXmalware (ai score=85)
MalwarebytesSivis.Virus.FileInfector.DDS
PandaTrj/CI.A
TencentWin32.Trojan.Dropper.Svrk
eGambitUnsafe.AI_Score_94%
FortinetPossibleThreat
AVGWin32:VB-OJQ [Wrm]
MaxSecureTrojan.Malware.1728101.susgen

How to remove Razy.168197?

Razy.168197 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment