Categories: Malware

Should I remove “Razy.594648”?

The Razy.594648 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.594648 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A scripting utility was executed
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.594648?


File Info:
crc32: 3C62AE66md5: 147118d7ee65d250fd50ecac094fe280name: run.exesha1: 1957e1e4d58b16b27361d4f39b669f4aca0a93e0sha256: baeb8090596608f7bed3bce9a7f7812d4f9f004a9ff8da617477a7bfa0a7cfc6sha512: 0d45e4be47d5e0345e816d67f18726f45742c0c375b9b1a4aff9a33559124ca817dd3b9e5cba521a6439522f433f90c4fa7b5790fe67b6455e1d231c1764d9fassdeep: 98304:JdNxioTqH52FDAQYyff9nOqECVKQEJFcd1VwhBgdrKCs07T/xHID87fT:JXxicqH52FDxFZOqECVKQEJSLDAU/t77type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.594648 also known as:

MicroWorld-eScan	Gen:Variant.Razy.594648
FireEye	Gen:Variant.Razy.594648
CAT-QuickHeal	Trojan.CoinMiner
Qihoo-360	QVM41.1.Malware.Gen
McAfee	Artemis!147118D7EE65
Cylance	Unsafe
K7AntiVirus	Adware ( 005234f01 )
BitDefender	Gen:Variant.Razy.594648
K7GW	Adware ( 005234f01 )
Cyren	W64/Application.QVYQ-7437
Symantec	Trojan.Gen.MBT
APEX	Malicious
Paloalto	generic.ml
ClamAV	Multios.Coinminer.Miner-6781728-2
Emsisoft	Gen:Variant.Razy.594648 (B)
Comodo	Malware@#3sh63okz20oro
TrendMicro	Coinminer_MALXMR.SMSTAK-WIN64
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.tc
Trapmine	suspicious.low.ml.score
Sophos	Generic PUA NP (PUA)
Ikarus	PUA.CoinMiner
Antiy-AVL	GrayWare/Win64.CoinMiner
Microsoft	PUA:Win32/CoinMiner
Arcabit	Trojan.Razy.D912D8
GData	Win64.Trojan.Agent.XKCF6K
MAX	malware (ai score=88)
Malwarebytes	RiskWare.BitCoinMiner
Zoner	Probably RARAutorun
ESET-NOD32	a variant of Win64/CoinMiner.FR potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R007H0CB720
Rising	HackTool.MinerCfg/JSON!1.BEAA (CLASSIC:dGZlOgajoZwGjMvJMg)
Fortinet	Adware/CoinMiner
AVG	Win64:PUP-gen [PUP]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_60% (W)