Malware

Razy.475462 malicious file

Malware Removal

The Razy.475462 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.475462 virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Tries to suspend Cuckoo threads to prevent logging of malicious activity
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Razy.475462?


File Info:

crc32: 3B4379C0
md5: b096ad09d50fbc146b1aa072a6403bd9
name: 212cf89dfa7cd1bb5503cd96dafc39d817f8818b0578fde920.exe
sha1: 05221e680bdec25049c251a5a28267302db2950e
sha256: 922390d57b756578a3c46f425964f14c3393e34d1d6f576181f4aef699b48158
sha512: afa14af046d1d2aa7d8b8058dacb53bf5e4eace7d71bd1623f6467886c28fabf3524f0ce61f63dc00bbf31a7dc660c97518a19d117e56d3d6c9ed1644e96fa4d
ssdeep: 98304:pBkjZVxIB4JhajZLy8feC3vpoQKpU013pWI:pGtlhatLeC3v2QKpUm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Razy.475462 also known as:

BkavHW32.Packed.
MicroWorld-eScanGen:Variant.Razy.475462
FireEyeGeneric.mg.b096ad09d50fbc14
McAfeeArtemis!B096AD09D50F
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0054bb0d1 )
BitDefenderGen:Variant.Razy.475462
K7GWTrojan ( 0054bb0d1 )
Cybereasonmalicious.9d50fb
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
GDataGen:Variant.Razy.475462
KasperskyHEUR:Trojan.Win32.Generic
AlibabaPacked:Win32/VMProtect.32383952
NANO-AntivirusTrojan.Win32.Razy.fptnnf
AegisLabTrojan.Win32.Razy.4!c
RisingTrojan.Crypto!8.364 (CLOUD)
Endgamemalicious (high confidence)
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.ZPACK.Gen
ZillyaTrojan.Packed.Win32.156972
TrendMicroPAK_Xed-3
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Razy.475462 (B)
SentinelOneDFI – Malicious PE
WebrootW32.Trojan.Gen
AviraTR/Crypt.ZPACK.Gen
ArcabitTrojan.Razy.D74146
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/AutoKMS
AhnLab-V3Trojan/Win32.RL_Generic.R267867
Acronissuspicious
ALYacGen:Variant.Razy.475462
MAXmalware (ai score=94)
Ad-AwareGen:Variant.Razy.475462
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Packed.VMProtect.HR
TrendMicro-HouseCallPAK_Xed-3
TencentWin32.Trojan.Generic.Pdvq
YandexTrojan.VMProtect!
IkarusTrojan.Win32.VMProtect
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/PossibleThreat
BitDefenderThetaGen:NN.ZexaF.34090.@JW@aGXlHDci
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM19.1.F1B7.Malware.Gen

How to remove Razy.475462?

Razy.475462 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment