About "Razy.636515" infection

The Razy.636515 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.636515 virus can do?

Executable code extraction
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.636515?


File Info:
crc32: 30590A71
md5: 219865c5557226f0c4be9d467dc6ad87
name: 219865C5557226F0C4BE9D467DC6AD87.mlw
sha1: 977891a7a0cedb1a47966a2bb7204c5fad32f925
sha256: 5f368497b93187ef5eab06b4ff74dd16bab51675ed3a1fa852bc7cda88c2dee2
sha512: 59c73f8339a4bfc27c50672cd9a6511f8cd50f21983e7f0bc6838172195c524fd68b2cbf98b469cf7469743b3a61f40ca0bdb4f24f9e0189f8db7be70e2d7c88
ssdeep: 1536:m7YNSX+ZFl5ExQ7NQM9o/BVIwLRBwv8c+MCHh:GYk8uQB79eJTwB1CB
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0409 0x04b0
InternalName: aasv0014
FileVersion: 1.00.0007
CompanyName: TOTALBANCO
ProductName: aasv0014
ProductVersion: 1.00.0007
OriginalFilename: aasv0014.exe

Razy.636515 also known as:

K7AntiVirus	NetWorm ( 700000151 )
ALYac	Gen:Variant.Razy.636515
Cylance	Unsafe
BitDefender	Gen:Variant.Razy.636515
K7GW	NetWorm ( 700000151 )
Cybereason	malicious.555722
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Razy.636515
Ad-Aware	Gen:Variant.Razy.636515
Sophos	ML/PE-A + Mal/VB-UY
BitDefenderTheta	Gen:NN.ZevbaCO.34266.dmKfa0DHcHmi
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.qc
FireEye	Generic.mg.219865c5557226f0
Emsisoft	Gen:Variant.Razy.636515 (B)
Avira	TR/Crypt.ULPM.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.636515
McAfee	Artemis!219865C55572
MAX	malware (ai score=85)
Rising	Malware.Heuristic!ET#90% (RDMK:cmRtazoUT0USlb14HwE+p3eURHK2)
Ikarus	Trojan.Crypt
Paloalto	generic.ml

How to remove Razy.636515?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Razy.636515” infection