Categories: Malware

Should I remove “Razy.687616”?

The Razy.687616 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.687616 virus can do?

Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine Razy.687616?


File Info:
name: 49936A651CA022955214.mlwpath: /opt/CAPEv2/storage/binaries/036cff08dfb71de62dacd9d6f69396766cc79e6a059ae498efe7ce6e50d54800crc32: 142B0B33md5: 49936a651ca022955214cd5222410074sha1: 1c3cb2e60e654e65f303fe3611676bfaa7ca94adsha256: 036cff08dfb71de62dacd9d6f69396766cc79e6a059ae498efe7ce6e50d54800sha512: 7e6e36625d1cc5ca03c7e57b03a843f924cbf3fea5197f0f3f3313fd1f3c347ccd1ca673d4a178d96448e6f740c9748aa4a0bc3f54d60adc1c82977cb56028efssdeep: 768:v6HnMrsTMrYnr4fHwNyGejbM8/CMx/9dNGEUwwIRYaviGcbkhlipSY1zP8sqY1jt:SgKaYr4fsyGejQ9Cibku9VLkui6type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DD73C03297A68436C16BCB3090E927FEEC323A511951332E4757550D2A32B68FF27F66sha3_384: 59aa831e6564333c71637e528152f4b6f7dfbc5a38c36bae3b3170bdf3460307728a5737f0657bac4653370a5b3e1f21ep_bytes: 558bec83c4b44ee8b1050000f7db46b8timestamp: 2007-12-13 20:06:03
Version Info:
CompanyName: ASD SOFTWINFileDescription: ASD BitDefenderFileVersion: 788InternalName: XuihspqancLegalCopyright: Copyright © Xuihspqanc Software 2000-2010OriginalFilename: Xuihspqanc.exeProductName: Xuihspqanc Ldyyb GvhayeProductVersion: 4.1Translation: 0x0409 0x04e4

Razy.687616 also known as:

Lionic	Trojan.Win32.PornoAsset.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed.1998
MicroWorld-eScan	Gen:Variant.Razy.687616
McAfee	PWS-Zbot.gen.do
Cylance	Unsafe
Zillya	Trojan.PornoAsset.Win32.22892
K7AntiVirus	Trojan ( 0055dd191 )
Alibaba	Ransom:Win32/PornoAsset.c7558c75
K7GW	Trojan ( 0055dd191 )
Cybereason	malicious.51ca02
BitDefenderTheta	Gen:NN.ZexaF.34084.eq1@aaFoTnkc
Cyren	W32/Skintrim.1!Generic
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.LMY
TrendMicro-HouseCall	TSPY_ZBOT.SMWX
Paloalto	generic.ml
Kaspersky	Trojan-Ransom.Win32.PornoAsset.cqts
BitDefender	Gen:Variant.Razy.687616
NANO-Antivirus	Trojan.Win32.PornoAsset.dsqtzi
Avast	Win32:Kryptik-AQW [Trj]
Tencent	Win32.Trojan.Pornoasset.Pepv
Ad-Aware	Gen:Variant.Razy.687616
Sophos	ML/PE-A + Mal/FakeAV-IU
Comodo	Malware@#tcvevhiwzc3t
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_ZBOT.SMWX
McAfee-GW-Edition	PWS-Zbot.gen.do
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.49936a651ca02295
Emsisoft	Gen:Variant.Razy.687616 (B)
Ikarus	Trojan.Win32.Oficla
GData	Gen:Variant.Razy.687616
Jiangmin	Trojan.Antavmu.caf
eGambit	Generic.Malware
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.18A8737
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft	Ransom.Win32.Zbot.sa
Arcabit	Trojan.Razy.DA7E00
Microsoft	Trojan:Win32/Dynamer!ac
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.687616
APEX	Malicious
Rising	Trojan.Generic@ML.100 (RDMK:BadXn25u7ihFQmHlR6wiwg)
Yandex	Trojan.GenAsa!lHGLSKE++uI
MAX	malware (ai score=99)
Fortinet	W32/Kryptik.WDN!tr
AVG	Win32:Kryptik-AQW [Trj]
Panda	Bck/Qbot.AO
CrowdStrike	win/malicious_confidence_90% (W)