Categories: Malware

How to remove “Razy.685874 (B)”?

The Razy.685874 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.685874 (B) virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (6 unique times)
Performs some HTTP requests
Creates a copy of itself
Anomalous binary characteristics

Related domains:

groston.top

apps.identrust.com

isrg.trustid.ocsp.identrust.com

ocsp.int-x3.letsencrypt.org

How to determine Razy.685874 (B)?


File Info:
crc32: 688CD764md5: 88d24028016a4d2b054ecd9786ee6207name: tmpjsb1e7w1sha1: ca0251a6b978aa35bf2e9a68c5ec13cb83e4500bsha256: b301f2938cba464c971569ea87c5c6f26c7b1f6a9fb2a5813c8dd0283eb6d460sha512: 8680e5e1d1a3161daaea33654e07fb942f83b37d3e0b3203b17ccf7f7f4ecd5fc7decc9df72a41b4ec15dce6369d147950e1cb0493a5307cdcbb179f92984712ssdeep: 6144:xJNurpEchSxUL25sVpmKy2vNckX5D8CUzrs/pouMs18jV8DKQ+4Cg+rd:LuThSGLEK6MD/yw/poTVWNgtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.685874 (B) also known as:

MicroWorld-eScan	Gen:Variant.Razy.685874
FireEye	Generic.mg.88d24028016a4d2b
McAfee	GenericRXKZ-FG!88D24028016A
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Razy.685874
K7GW	Trojan ( 0056891e1 )
K7AntiVirus	Trojan ( 0056891e1 )
BitDefenderTheta	Gen:NN.ZedlaF.34128.sq5@aKnETHb
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Trojan-gen
GData	Gen:Variant.Razy.685874
NANO-Antivirus	Trojan.Win32.Kryptik.hlbqtu
Tencent	Malware.Win32.Gencirc.119360d3
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Razy.685874 (B)
SentinelOne	DFI – Suspicious PE
Avira	TR/Crypt.Agent.vvktf
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Razy.DA7732
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.Razy.685874
MAX	malware (ai score=82)
Ad-Aware	Gen:Variant.Razy.685874
Cylance	Unsafe
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HEAE
Rising	Trojan.Kryptik!8.8 (TFE:dGZlOgPi/xzCWxBeWg)
Yandex	Trojan.Kryptik!BLfcy/Y1qaU
Fortinet	W32/Kryptik.HEAE!tr
AVG	Win32:Trojan-gen
Qihoo-360	HEUR/QVM40.1.EC08.Malware.Gen