Razy.639966 information

The Razy.639966 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.639966 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.639966?


File Info:
crc32: 4E2166D3
md5: 45265a892236a65be9cdce7ae5b60419
name: 98kksjh.exe
sha1: 6d31ff2d02067f44e3d32ab4f3358a35ddd3ac58
sha256: 99e619d50225a860298d04875a23481fa26cec511f58e09474783a1d6d2e5c3e
sha512: ba6708f73c2152483812b912a08b805efa4d91d72348369703b30f9e1b79c6427b986fa9f2de9fbfe90a7f1b19a65eecb8f7086ff6700bb4126dc6af82158a2a
ssdeep: 768:AoJXsBBrKdZirYzRVKPTPTyi2gFT9lh875apUa1wecCdrMltlDIvM8:NuBBrKbLzuPb+i2gh9Q75EAeRdraDIf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: tekstom
FileVersion: 1.00
CompanyName: Gasher
ProductName: FICH
ProductVersion: 1.00
FileDescription: Dyksvmmer
OriginalFilename: tekstom.exe

Razy.639966 also known as:

MicroWorld-eScan	Gen:Variant.Razy.639966
McAfee	Artemis!45265A892236
Cylance	Unsafe
Alibaba	Backdoor:Win32/Remcos.0afeb987
K7GW	Trojan ( 005644de1 )
Cyren	W32/VBKrypt.AHN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.ELLA
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Razy-7661440-0
GData	Gen:Variant.Razy.639966
Kaspersky	Backdoor.Win32.Remcos.omi
BitDefender	Gen:Variant.Razy.639966
Avast	FileRepMalware
Tencent	Win32.Trojan.Inject.Auto
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.BadFile.ct
Emsisoft	Gen:Variant.Razy.639966 (B)
F-Prot	W32/VBKrypt.AHN.gen!Eldorado
Arcabit	Trojan.Razy.D9C3DE
AegisLab	Trojan.Win32.Remcos.m!c
ZoneAlarm	Backdoor.Win32.Remcos.omi
Microsoft	Trojan:Win32/Wacatac.C!ml
ALYac	Gen:Variant.Razy.639966
MAX	malware (ai score=99)
Ad-Aware	Gen:Variant.Razy.639966
Malwarebytes	Trojan.GuLoader.VB
TrendMicro-HouseCall	TROJ_GEN.R002H0CDC20
Rising	Backdoor.Remcos!8.B89E (CLOUD)
Fortinet	W32/GenKryptik.ELKW!tr
BitDefenderTheta	Gen:NN.ZevbaCO.34106.gm0@amVYidci
AVG	FileRepMalware
Panda	Trj/GdSda.A
Qihoo-360	Generic/Trojan.4e3

How to remove Razy.639966?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.