Malware

Razy.681333 malicious file

Malware Removal

The Razy.681333 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.681333 virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Razy.681333?


File Info:

crc32: 100EA874
md5: 7095a724461739b15822fd0dd49b327f
name: win.exe
sha1: 3d98b504b552c0b86912aaaec3cb9658f8b9260e
sha256: 15b59ff79bbe290dc9da9c695017740a697f5b2f58c3aa78c04af1485a7b75dd
sha512: 1753efee3a36f8aeb6fec810433e7f07feef30774b9ba65d6c3487862f88f64fc006e12a166a306f1be1974fb1e50129587897d63b919e700c9dbf8abd1a2272
ssdeep: 98304:g+ESKW5B12R2kdVLOOFzAg8vQ6ygfk537ZP:glSh12ftMgR/R7ZP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248
FileVersion: 1.0.0.0
Comments: 360x5347x7ea7x7a0bx5e8f
ProductName: 360x5347x7ea7x7a0bx5e8f
ProductVersion: 1.0.0.0
FileDescription: 360x5347x7ea7x7a0bx5e8f
Translation: 0x0804 0x04b0

Razy.681333 also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanGen:Variant.Razy.681333
FireEyeGeneric.mg.7095a724461739b1
Qihoo-360Generic/Trojan.7e8
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Razy.681333
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZexaF.34132.VF2@a4fqpqfb
ESET-NOD32a variant of Win32/Packed.NoobyProtect.O suspicious
AvastWin32:DropperX-gen [Drp]
GDataWin32.Riskware.NoobyProtect.B
Ad-AwareGen:Variant.Razy.681333
ComodoTrojWare.Win32.Amtar.KNB@4wlm66
Invinceaheuristic
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Razy.681333 (B)
IkarusPUA.NoobyProtect
MAXmalware (ai score=85)
Antiy-AVLGrayWare/Win32.FlyStudio.a
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Razy.DA6575
CynetMalicious (score: 100)
Acronissuspicious
VBA32BScope.Trojan.Dynamer
ALYacGen:Variant.Razy.681333
APEXMalicious
SentinelOneDFI – Malicious PE
eGambitPE.Heur.InvalidSig
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.4b552c

How to remove Razy.681333?

Razy.681333 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment