Categories: Malware

Should I remove “Razy.697875”?

The Razy.697875 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.697875 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Razy.697875?


File Info:
crc32: E17BC791md5: d6b2ee3825a9869e0588e361c5fa004dname: w.pdfsha1: 2730abe52e015eff2b01c5fbe151a4bf5bbd83c0sha256: f9cff9e6050b1536e55014e7eafdc8827fb237e9235ff60265c5d1afaa5d5e6esha512: 5fc071524e1dfad20b54817594069318a2ed25d49d27e02a319eb2fb86beb398daf41ab68989117cd50c803ad9d83f87b2b245a321b914dc0f7c5ba85670a749ssdeep: 6144:tZL9DG7Pfl6BflFdffaaaQb3/HAV3wVKKxxGcR:tZL9DG7ydXffaaaAPgcdrRtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright 2011 BlueStack Systems, Inc.  All Rights Reserved.Assembly Version: 1.0.0.0InternalName: fJzYNekEcb.exeFileVersion: 1.0.0.0CompanyName: BlueStack Systems, Inc.LegalTrademarks: Comments: MSI App Player Android HostProductName: MSI App PlayerProductVersion: 1.0.0.0FileDescription: MSI App PlayerOriginalFilename: fJzYNekEcb.exe

Razy.697875 also known as:

MicroWorld-eScan	Gen:Variant.Razy.697875
FireEye	Generic.mg.d6b2ee3825a9869e
McAfee	Artemis!D6B2EE3825A9
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Razy.697875
K7GW	Trojan ( 005695d91 )
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
GData	Gen:Variant.Razy.697875
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
Alibaba	Trojan:Win32/Kryptik.ali2000016
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Gen:Variant.Razy.697875
Emsisoft	Gen:Variant.Razy.697875 (B)
F-Secure	Trojan.TR/Kryptik.lkpxo
TrendMicro	TROJ_GEN.R049C0WFR20
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Crypt
Avira	TR/Kryptik.lkpxo
MAX	malware (ai score=86)
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.DAA613
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
Microsoft	Trojan:Win32/Bluteal!rfn
AhnLab-V3	Trojan/Win32.RL_MSILKrypt.C4143081
BitDefenderTheta	Gen:NN.ZemsilF.34130.nm0@aqMuUrc
ALYac	Gen:Variant.Razy.697875
ESET-NOD32	a variant of MSIL/Kryptik.WKX
TrendMicro-HouseCall	TROJ_GEN.R049C0WFR20
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Kryptik.WKX!tr
AVG	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Backdoor.c00