What is “Razy.601678”?

The Razy.601678 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.601678 virus can do?

How to determine Razy.601678?


File Info:
crc32: 4BDC4ED5
md5: 3b0d643ceffe0ba492023aa451aeee11
name: upload_file
sha1: 355e47c549caf75f1aa086e0298a611ea2088013
sha256: 15073e335455478c4bf28954f35f6ab8f692527786b3d4436acb0e55097bb952
sha512: 3d89801045125d327b3074ef28a48ddc5aeceba696fd01ebba418d48d64dfab91a1fe34b41b7c516b59700eb4a45e0d189005f76040fa8127a02149cdeab3866
ssdeep: 3072:TJwpS2NACV4qAbypuljJGnJYoTjqETdtbsnOfFwXVa/q494YJGaXMvaVHnaH:TJwpYVNcn3pTdNe+WXViB4ujVH
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Razy.601678 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.601678
ALYac	Gen:Variant.Razy.601678
Malwarebytes	Trojan.Cometer
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Razy.601678
Invincea	Mal/Swrort-Y
Symantec	Backdoor.Cobalt
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Beacon.A
ClamAV	Win.Trojan.CobaltStrike-8091534-0
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
Ad-Aware	Gen:Variant.Razy.601678
Emsisoft	Gen:Variant.Razy.601678 (B)
F-Secure	Heuristic.HEUR/AGEN.1104531
DrWeb	BackDoor.Meterpreter.157
Zillya	Tool.CobaltStrike.Win64.118
McAfee-GW-Edition	BehavesLike.Win64.Injector.dh
SentinelOne	DFI – Malicious PE
FireEye	Generic.mg.3b0d643ceffe0ba4
Sophos	Mal/Swrort-Y
APEX	Malicious
GData	Gen:Variant.Razy.601678
Jiangmin	Trojan.Cometer.agb
Avira	HEUR/AGEN.1104531
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.Cometer
Arcabit	Trojan.Razy.D92E4E
ZoneAlarm	HEUR:Trojan.Win32.Cometer.gen
Microsoft	VirTool:Win64/Atosev.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Cometer.R325811
Acronis	suspicious
TACHYON	Trojan/W64.Agent.260608.C
Cylance	Unsafe
Rising	Trojan.Cometer!8.E150 (TFE:5:9fl0iSza5cQ)
Ikarus	Trojan.Swrort
eGambit	Trojan.Generic
Fortinet	W32/Meterpreter.AAE!tr
AVG	Win64:HacktoolX-gen [Trj]
Avast	Win64:HacktoolX-gen [Trj]

How to remove Razy.601678?

Razy.601678 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X