Categories: Malware

Razy.601581 removal tips

The Razy.601581 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.601581 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

ec2-54-246-174-77.eu-west-1.compute.amazonaws.com

How to determine Razy.601581?


File Info:
crc32: D6044BE8md5: 2815a64c16baec416d24613086193c8dname: 2815A64C16BAEC416D24613086193C8D.mlwsha1: e985e93cbd71f7b155897a3781963df2cdf9cfb4sha256: 1a2298b234d8733b250522e85dbf9f45905c63ab64a84c2972a0b94f458930c8sha512: e7fa295a22d76e3d43889a461cef0411296ce51e66958ccf338f07eb2fb092abb02e6d7c6edf79bc44bc60f1f5429c6d6ba1377ab18d7ebd1877d7238fc61d8essdeep: 49152:tqVf8S0pdIuGs5v/vPC/9+TmuVu5JgpugmLenayh2sa5mHt5q0+8i:tC8/lKRu4fLeayhZ0q55itype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: noneInternalName: CheatEngineFileVersion: 5.5.0.31CompanyName: LegalTrademarks: -Comments: report bugs and or suggestions to dark_byte@hotmail.comProductName: ProductVersion: 5.5OriginalFilename: Cheat Engine.EXETranslation: 0x0409 0x04e4

Razy.601581 also known as:

K7AntiVirus	Adware ( 0050ecaf1 )
DrWeb	Trojan.Moneyinst.156
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.601581
Cylance	Unsafe
Zillya	Adware.FileTourCRTD.Win32.12420
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/FileTour.f087ee71
K7GW	Adware ( 0050ecaf1 )
Cybereason	malicious.c16bae
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.FileTour.FBK
APEX	Malicious
Avast	FileRepMalware
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Gen:Variant.Razy.601581
NANO-Antivirus	Riskware.Win32.Moneyinst.fguspo
MicroWorld-eScan	Gen:Variant.Razy.601581
Tencent	Malware.Win32.Gencirc.114afb52
Ad-Aware	Gen:Variant.Razy.601581
Sophos	Generic PUA OJ (PUA)
Comodo	ApplicUnwnt@#1to9wxcprx73i
BitDefenderTheta	AI:Packer.E27790F620
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Adware-FileTour
FireEye	Generic.mg.2815a64c16baec41
Emsisoft	Application.AdFile (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Ekstak.cag
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2091A08
Microsoft	Trojan:Win32/Wacatac.A!ml
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
GData	Gen:Variant.Razy.601581
AhnLab-V3	PUP/Win32.FileTour.C1986608
Acronis	suspicious
McAfee	Adware-FileTour
MAX	malware (ai score=99)
VBA32	BScope.Adware.FileTour
Malwarebytes	HackTool.GameHack
Panda	Trj/CI.A
Rising	Adware.FileTour!1.ACB3 (CLASSIC)
Ikarus	PUA.FileTour
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	Riskware/FileTour
AVG	FileRepMalware
Paloalto	generic.ml