Malware

Razy.576379 removal guide

Malware Removal

The Razy.576379 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.576379 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Razy.576379?


File Info:

crc32: 120DE4FF
md5: 43b84b2944bc9f12153a543abcd1a866
name: Client.jpg
sha1: d7526cc756b7334b0eec4ecd242a6f23b762b6aa
sha256: 223380ac47a24784c50be1aaff57e45cfe921d4436917069927ed2ccd606e5f7
sha512: b34e6888cf1dc72859b7e13edd0196ef682e90da374021869221b116189415bbf93279784785c1c63c30d9895d8934defc4b6eedaf8811b074b13ee7d0d225d4
ssdeep: 768:ceHHko/GoWAGXCOehsg6gAOMRI1R8Qf0blWXULfZNjskmywYDDGo2tYcFmVc6K:cRIGyOCsCh8blWXkZNjFdLDGoKmVcl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: Stub.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: Stub.exe

Razy.576379 also known as:

MicroWorld-eScanGen:Variant.Razy.576379
FireEyeGeneric.mg.43b84b2944bc9f12
CAT-QuickHealTrojan.WacatacFC.S12095901
Qihoo-360HEUR/QVM03.0.B4F7.Malware.Gen
McAfeePacked-FXY!43B84B2944BC
CylanceUnsafe
SangforMalware
Cybereasonmalicious.944bc9
TrendMicroCoinminer.MSIL.CRYSAN.SM
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Packed.Razy-7649790-0
BitDefenderGen:Variant.Razy.576379
Paloaltogeneric.ml
Endgamemalicious (high confidence)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.DownLoader33.22293
ZillyaTrojan.Agent.Win32.1307702
Invinceaheuristic
McAfee-GW-EditionPacked-FXY!43B84B2944BC
FortinetMSIL/Agent.CFQ!tr
EmsisoftGen:Variant.Razy.576379 (B)
IkarusTrojan.MSIL.Agent
CyrenW32/MSIL_Agent.KX.gen!Eldorado
JiangminBackdoor.MSIL.ctcu
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
MAXmalware (ai score=88)
ArcabitTrojan.Razy.D8CB7B
ZoneAlarmHEUR:Backdoor.MSIL.Crysan.gen
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Malware/Win32.RL_Generic.C4058256
Acronissuspicious
ALYacGen:Variant.Razy.576379
Ad-AwareGen:Variant.Razy.576379
MalwarebytesBackdoor.NyanWorm
ESET-NOD32a variant of MSIL/Agent.CFQ
TrendMicro-HouseCallCoinminer.MSIL.CRYSAN.SM
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
GDataGen:Variant.Razy.576379
BitDefenderThetaAI:Packer.FD8FF2C81F
AVGWin32:DropperX-gen [Drp]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_80% (D)

How to remove Razy.576379?

Razy.576379 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment