Categories: Malware

How to remove “Razy.443799”?

The Razy.443799 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.443799 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Tries to unhook or modify Windows functions monitored by Cuckoo
Anomalous binary characteristics

Related domains:

yeahnot.ru

How to determine Razy.443799?


File Info:
crc32: 223A4725md5: 9819831a4b85b4440b9a0e44e37a2593name: b4bf5b20b110f3a7795bfb724d4b16fdc08fac6eda64048728.exesha1: 2f58450fca26eaa93c118b8eaf372ba0197c7b25sha256: c4f5a8d7cb04e04d7189578c6f89c49bda948f84dd6f8bd16ef60e738f575465sha512: d2347c64054b6c99c81aabe7661e9759e018eb09fd5dbba021298e8b0525cf8e1459860f83257f4783e548d751727b17255ae4f4f1f0067480a946f1dc8b8703ssdeep: 98304:1VxUlSTBlBrHQLNlQpH+Gr7Z401y6QIUxttLlhNy4Un0hXyNw1HtJaOyJcM:1fXTxsLNcHtO01y9LH6nVwZzWVtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.443799 also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Gen:Variant.Razy.443799
FireEye	Generic.mg.9819831a4b85b444
Qihoo-360	HEUR/QVM19.1.4761.Malware.Gen
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Razy.443799
Cybereason	malicious.a4b85b
TrendMicro	PAK_Xed-3
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Trojan.Generic!8.C3 (TFE:dGZlOgX4stkL6V9jgQ)
Ad-Aware	Gen:Variant.Razy.443799
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Razy.443799 (B)
SentinelOne	DFI – Malicious PE
Avira	TR/Crypt.ZPACK.Gen
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.D6C597
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.D!ml
AhnLab-V3	Malware/Win32.RL_Generic.R300786
Acronis	suspicious
McAfee	Artemis!9819831A4B85
MAX	malware (ai score=89)
Malwarebytes	Trojan.MalPack.PES.Generic
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Packed.VMProtect.HR
TrendMicro-HouseCall	PAK_Xed-3
Ikarus	Trojan.Win32.VMProtect
Fortinet	Riskware/VMProtectPacked
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_90% (D)
MaxSecure	Trojan.Malware.300983.susgen