Categories: Malware

What is “Razy.443659”?

The Razy.443659 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.443659 virus can do?

  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Uses suspicious command line tools or Windows utilities

Related domains:

s.rapid7.xyz

How to determine Razy.443659?


File Info:

crc32: 51F5EDE1md5: 542a6409a0aed28b72630177b75f15daname: 542A6409A0AED28B72630177B75F15DA.mlwsha1: 817d819e80a4a24a6cdbb208cd0a03c386bd95a1sha256: f6d98ffe476c9d1a3d9c17da10108424620dc222b6469856141739e2f10bd9b7sha512: 9409b788cf43fbb0761ab83664466465463723bd4f778ce51445a61a319a3dcebe92b3a21bb0a71d976d0e56c1f52a6029cd7856b2a8e20e350fd93feeba3d04ssdeep: 6144:EE/fO+ht5ny0Vpwod6uDX95pJMIXEM+yCorxH44tlKR:bO+1TweX97JMIXEMHrxH9tlKRtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Razy.443659 also known as:

Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Razy.443659
FireEye Generic.mg.542a6409a0aed28b
CAT-QuickHeal Trojan.Mauvaise.SL1
ALYac Trojan.Ransom.Farmobuk
Cylance Unsafe
Zillya Trojan.Generic.Win32.195077
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0053ef601 )
BitDefender Gen:Variant.Razy.443659
K7GW Trojan ( 0053ef601 )
Cybereason malicious.9a0aed
Cyren W32/S-907b03b5!Eldorado
Symantec Ransom.MongoLock
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Win.Ransomware.MongoLock-6827834-0
Kaspersky Trojan-Ransom.Win32.Farmobuk.a
Alibaba Ransom:Win32/Farmobuk.ef40164e
NANO-Antivirus Trojan.Win32.Filecoder.fjeelx
ViRobot Trojan.Win32.Agent.296696
AegisLab Trojan.Win32.Farmobuk.tqGN
Rising Ransom.FileCryptor!8.1A7 (RDMK:cmRtazoo5GM4hj+7XCnnbIuQmS5I)
Ad-Aware Gen:Variant.Razy.443659
Emsisoft Gen:Variant.Razy.443659 (B)
Comodo TrojWare.Win32.Ransom.Farmobuk.A@81az59
F-Secure Trojan.TR/FileCoder.xqfgu
DrWeb Trojan.Encoder.26950
TrendMicro Ransom.Win32.MONGOLOCK.SM
McAfee-GW-Edition Trojan-FQDP!463F3BB5B035
MaxSecure Trojan.Malware.300983.susgen
Sophos Mal/Generic-S + Troj/Ransom-FEI
Ikarus Trojan-Ransom.Mongolock
Jiangmin Trojan.Generic.csqhd
Avira TR/FileCoder.xqfgu
MAX malware (ai score=100)
Antiy-AVL Trojan/Win32.Filecoder
Microsoft Trojan:Win32/Skeeyah.A!rfn
Arcabit Trojan.Razy.D6C50B
SUPERAntiSpyware Ransom.FileCryptor/Variant
ZoneAlarm Trojan-Ransom.Win32.Farmobuk.a
GData Gen:Variant.Razy.443659
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.FileCoder.R239529
Acronis suspicious
McAfee GenericRXAA-AA!542A6409A0AE
VBA32 BScope.Trojan.Fuery
Malwarebytes Ransom.FileCryptor
Panda Trj/Genetic.gen
ESET-NOD32 a variant of Win32/Filecoder.NSG
TrendMicro-HouseCall Ransom.Win32.MONGOLOCK.SM
Tencent Malware.Win32.Gencirc.10b634d5
Yandex Trojan.GenAsa!u/4uglkLPIk
SentinelOne Static AI – Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet W32/Filecoder.NSG!tr.ransom
BitDefenderTheta Gen:NN.ZexaF.34590.smJfaOByCye
AVG Win32:Trojan-gen
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (D)
Qihoo-360 Win32/Trojan.Ransom.1e2

How to remove Razy.443659?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago