Razy.688548 information

The Razy.688548 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.688548 virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
Uses Windows utilities for basic functionality
Sniffs keystrokes
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

facebookstore.serveftp.com

How to determine Razy.688548?


File Info:
crc32: 27CFDEEF
md5: e2c019165900b5d07b9fc55d1b5ff1b4
name: E2C019165900B5D07B9FC55D1B5FF1B4.mlw
sha1: 9808e87fef58ad9a3e0cd24997a356753c417fcf
sha256: dd9080e3dd7074304baa0d9fdc3d22dccf24ab34591fbe11736658801c96635f
sha512: 04282f727b98ccbc0ea0c1af51133117a46b959c947cf8fedb329810915b76550501671b7a18025290b107ecd4e3428dd66e09408cb30cde169259ff36e4933c
ssdeep: 3072:yyNHPaV0g4eTPqwnQoZARSrimNJ32sB6aqb9rtvjewpI5YPrUP5I:yDz4ezXnhoSrim3zB6aqb9rtrxPzGI
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.2.3.6
InternalName: darck.exe
FileVersion: 1.05.08.0
CompanyName: products forever
Comments: Instal
ProductName: setup
ProductVersion: 1.05.08.0
FileDescription: darck
OriginalFilename: darck.exe

Razy.688548 also known as:

K7AntiVirus	Trojan ( 700000121 )
Lionic	Trojan.Win32.Generic.mCaR
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader13.59904
ClamAV	Win.Dropper.NetWire-9878292-0
ALYac	Gen:Variant.Razy.688548
Cylance	Unsafe
Zillya	Trojan.Zapchast.Win32.101979
Sangfor	Trojan.Win32.Kazy.frjf
Alibaba	Backdoor:MSIL/Bladabindi.94a01f2c
K7GW	Trojan ( 700000121 )
Cybereason	malicious.65900b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.CHE
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.688548
NANO-Antivirus	Trojan.Win32.Zapchast.dztnih
MicroWorld-eScan	Gen:Variant.Razy.688548
Tencent	Msil.Trojan.Zapchast.Akom
Ad-Aware	Gen:Variant.Razy.688548
Sophos	Mal/Generic-R + Troj/MSIL-HIM
Comodo	Malware@#2lrhu53ddi69y
BitDefenderTheta	Gen:NN.ZemsilF.34294.kq0@a4X82Hh
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	PWS-FCXS!E2C019165900
FireEye	Generic.mg.e2c019165900b5d0
Emsisoft	Gen:Variant.Razy.688548 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/MSIL.gcbb
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1111863
Antiy-AVL	Trojan/Generic.ASMalwS.11CD62B
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi.AN
Arcabit	Trojan.Razy.DA81A4
GData	Gen:Variant.Razy.688548
AhnLab-V3	Malware/Win32.RL_Generic.C4329753
McAfee	PWS-FCXS!E2C019165900
MAX	malware (ai score=88)
Panda	Trj/CI.A
Yandex	Trojan.Zapchast!1OCMk2YTeME
Ikarus	Worm.MSIL.Bladabindi
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.CHE!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Razy.688548?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.