Malware

Razy.661078 information

Malware Removal

The Razy.661078 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.661078 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Razy.661078?


File Info:

crc32: 87932ED9
md5: 2ad42f9c3007aea379a8f935e488fb85
name: 2AD42F9C3007AEA379A8F935E488FB85.mlw
sha1: 0621e9cdc1d9577a36992c890d4bd355835ff6a5
sha256: 15c8b4459d677d81bab68fc05951675aa1505793c716caaf2496ea953b8ee3c6
sha512: 7e254891c76e7565f11bb6cf4724f6161deb587b2bd1b04f6dae7e975d0380b02e3a72d6d961352985795c724645240f6f71393fd2d37a21cecc7af1285ad792
ssdeep: 12288:oOWcjj5kH+9IbPB5ZdUe/X/UM/ArGPS8vOJOYkTywBS:JWSj5m59bIwB
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Razy.661078 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.661078
FireEyeGeneric.mg.2ad42f9c3007aea3
McAfeeArtemis!2AD42F9C3007
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 700000121 )
BitDefenderGen:Variant.Razy.661078
K7GWTrojan ( 700000121 )
Cybereasonmalicious.c3007a
BaiduMSIL.Backdoor.Bladabindi.a
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Packed.Barys-7008062-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Gen8.eklkbk
Ad-AwareGen:Variant.Razy.661078
SophosML/PE-A + Troj/Bbindi-W
F-SecureTrojan.TR/Spy.Gen8
DrWebTrojan.DownLoader23.44937
ZillyaTrojan.Bladabindi.Win32.83629
McAfee-GW-EditionBehavesLike.Win32.Generic.hm
EmsisoftGen:Variant.Razy.661078 (B)
IkarusTrojan.MSIL.Bladabindi
JiangminTrojan.Generic.ardic
AviraTR/Spy.Gen8
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.Razy.DA1656
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Razy.661078
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.34804.HmW@aSHY8@b
ALYacGen:Variant.Razy.661078
MAXmalware (ai score=89)
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Bladabindi.CF
RisingBackdoor.MSIL.Bladabindi!1.9E49 (CLOUD)
YandexTrojan.Agent!VxD3f3/MBIw
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.a64

How to remove Razy.661078?

Razy.661078 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment