About "Razy.636788" infection

The Razy.636788 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.636788 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.636788?


File Info:
crc32: 97EEC21D
md5: 20cd4a6e87d70634483a1062c8420e0e
name: 20CD4A6E87D70634483A1062C8420E0E.mlw
sha1: f61846f6ecd2d03be846d4c25cab13ba97d3b9d2
sha256: a80651f67f36df152f5c954726f7a580aa76c38500000e141875d184438d699c
sha512: 9ff3f978be41a5fe76f82bb21548e6af03d2200ae3fad38f3c45422fac9ea736b5e6f420b5ee1c4ea5268b318f066e462b13997e7d2692403ecc866ad05e7d7d
ssdeep: 768:zG2Y7YE3QTQW0nc3ZijzAiv1XsySaZqflJCmjT0xWJ+In:K2Y7bIijzrvB0CqflJO8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: Pire's Executer X.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: YOUNEVERKNOW
ProductVersion: 1.0.0.0
FileDescription: YOUNEVERKNOW
OriginalFilename: Pire's Executer X.exe

Razy.636788 also known as:

MicroWorld-eScan	Gen:Variant.Razy.636788
FireEye	Generic.mg.20cd4a6e87d70634
CAT-QuickHeal	Trojan.Wacatac
McAfee	Artemis!20CD4A6E87D7
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Razy.4!c
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Razy.636788
K7GW	Unwanted-Program ( 00518a641 )
K7AntiVirus	Unwanted-Program ( 00518a641 )
Cyren	W32/Trojan.IELU-4964
APEX	Malicious
Ad-Aware	Gen:Variant.Razy.636788
Emsisoft	Gen:Variant.Razy.636788 (B)
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic PUA PG (PUA)
Ikarus	PUA.MSIL.Dllinject
Microsoft	Trojan:Win32/Wacatac.DA!ml
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Razy.D9B774
GData	Gen:Variant.Razy.636788
Cynet	Malicious (score: 90)
MAX	malware (ai score=81)
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	a variant of MSIL/DllInject.WV potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09B321
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_50%
Fortinet	Adware/DllInject
BitDefenderTheta	Gen:NN.ZemsilF.34804.cm0@aOL1DCm
Cybereason	malicious.e87d70
Qihoo-360	Win32/Trojan.Generic.HgIASOYA

How to remove Razy.636788?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Razy.636788” infection