Malware

Should I remove “Razy.697875”?

Malware Removal

The Razy.697875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.697875 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Razy.697875?


File Info:

crc32: E17BC791
md5: d6b2ee3825a9869e0588e361c5fa004d
name: w.pdf
sha1: 2730abe52e015eff2b01c5fbe151a4bf5bbd83c0
sha256: f9cff9e6050b1536e55014e7eafdc8827fb237e9235ff60265c5d1afaa5d5e6e
sha512: 5fc071524e1dfad20b54817594069318a2ed25d49d27e02a319eb2fb86beb398daf41ab68989117cd50c803ad9d83f87b2b245a321b914dc0f7c5ba85670a749
ssdeep: 6144:tZL9DG7Pfl6BflFdffaaaQb3/HAV3wVKKxxGcR:tZL9DG7ydXffaaaAPgcdrR
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright 2011 BlueStack Systems, Inc. All Rights Reserved.
Assembly Version: 1.0.0.0
InternalName: fJzYNekEcb.exe
FileVersion: 1.0.0.0
CompanyName: BlueStack Systems, Inc.
LegalTrademarks:
Comments: MSI App Player Android Host
ProductName: MSI App Player
ProductVersion: 1.0.0.0
FileDescription: MSI App Player
OriginalFilename: fJzYNekEcb.exe

Razy.697875 also known as:

MicroWorld-eScanGen:Variant.Razy.697875
FireEyeGeneric.mg.d6b2ee3825a9869e
McAfeeArtemis!D6B2EE3825A9
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Razy.697875
K7GWTrojan ( 005695d91 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataGen:Variant.Razy.697875
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
AlibabaTrojan:Win32/Kryptik.ali2000016
RisingTrojan.Kryptik!8.8 (CLOUD)
Ad-AwareGen:Variant.Razy.697875
EmsisoftGen:Variant.Razy.697875 (B)
F-SecureTrojan.TR/Kryptik.lkpxo
TrendMicroTROJ_GEN.R049C0WFR20
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
AviraTR/Kryptik.lkpxo
MAXmalware (ai score=86)
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.DAA613
AegisLabTrojan.Multi.Generic.4!c
ZoneAlarmHEUR:Backdoor.MSIL.Crysan.gen
MicrosoftTrojan:Win32/Bluteal!rfn
AhnLab-V3Trojan/Win32.RL_MSILKrypt.C4143081
BitDefenderThetaGen:NN.ZemsilF.34130.nm0@aqMuUrc
ALYacGen:Variant.Razy.697875
ESET-NOD32a variant of MSIL/Kryptik.WKX
TrendMicro-HouseCallTROJ_GEN.R049C0WFR20
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Kryptik.WKX!tr
AVGWin32:RATX-gen [Trj]
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Generic/Backdoor.c00

How to remove Razy.697875?

Razy.697875 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment