Categories: Malware

How to remove “Razy.553929”?

The Razy.553929 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.553929 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.

How to determine Razy.553929?


File Info:
crc32: 329239D6md5: 7956f40ef812c2f513d9882a54b9054dname: cl2.exesha1: 2b8a153fb8b1f4cf10f113af4c2c4271224961dcsha256: 1bad0f125609695086e3270bc7e98cda2d618c01077ff38e40d4a38bae3bab1csha512: 59081c56f1e6d26354f7bf88714310e4a3e610abd7651ac243650e50ddcc623a304dff3e5f69d67295561eec49f17e188aea53a6a463a68125aa8d82f23266b3ssdeep: 12288:CAEOwGFTtSzBiCKdHBxmCFjJRqnCFKIZcpdpPMQ4D6FnUC+S:3GGF5nFjKnCNZcL2QE1Stype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2017InternalName: cloudnet.exeFileVersion: 7.2.1.1CompanyName: EpicNet Inc.ProductName: EpicNet Cloud OfficeProductVersion: 7.2.1.1FileDescription: Cloud NetOriginalFilename: cloudnet.exeTranslation: 0x0409 0x04b0

Razy.553929 also known as:

Bkav	W32.KillProcSMB.Worm
MicroWorld-eScan	Gen:Variant.Razy.553929
FireEye	Generic.mg.7956f40ef812c2f5
CAT-QuickHeal	Trojan.Mauvaise.S3449555
McAfee	Trojan-FQGO!7956F40EF812
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005115a11 )
BitDefender	Gen:Variant.Razy.553929
K7GW	Trojan ( 005115a11 )
Cybereason	malicious.ef812c
TrendMicro	Trojan.Win32.GLUPTEBA.SMA
F-Prot	W32/Glupteba.A.gen!Eldorado
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
ClamAV	Win.Dropper.Glupteba-6973164-0
GData	Gen:Variant.Razy.553929
Kaspersky	HEUR:Trojan-Proxy.Win32.Glupteba.gen
Rising	Trojan.Glupteba!1.BC88 (RDMK:cmRtazqcIiGA6BgD5uq6PhUDVgZE)
Ad-Aware	Gen:Variant.Razy.553929
Emsisoft	Gen:Variant.Razy.553929 (B)
Comodo	TrojWare.Win32.Glupteba.BC@82zlxv
F-Secure	Trojan.TR/Crypt.XPACK.Gen2
DrWeb	Trojan.Proxy2.1436
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Trapmine	malicious.high.ml.score
Sophos	Troj/Glupteba-M
Ikarus	Trojan.Win32.Glupteba
Cyren	W32/Glupteba.A.gen!Eldorado
Jiangmin	TrojanProxy.Glupteba.adt
MaxSecure	Trojan.Win32.Glupteba
Avira	TR/Crypt.XPACK.Gen2
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Glupteba.a
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.D873C9
SUPERAntiSpyware	Hack.Tool/Gen-BitCoinMiner
ZoneAlarm	HEUR:Trojan-Proxy.Win32.Glupteba.gen
Microsoft	Trojan:Win32/Glupteba
AhnLab-V3	Trojan/Win32.SmearPasse.R247805
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34082.Pu0@aafW!Nck
ALYac	Gen:Variant.Razy.553929
VBA32	BScope.TrojanProxy.Glupteba
Malwarebytes	Trojan.Glupteba
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Glupteba.BC
TrendMicro-HouseCall	Trojan.Win32.GLUPTEBA.SMA
Tencent	Malware.Win32.Gencirc.10b3e869
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Glupteba.B!tr
Webroot	W32.Trojan.Gen
AVG	Win32:CrypterX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM20.1.9561.Malware.Gen