Malware

How to remove “Razy.719705”?

Malware Removal

The Razy.719705 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.719705 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Turkish
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

xred.mooo.com
freedns.afraid.org

How to determine Razy.719705?


File Info:

crc32: BCEDF9B9
md5: b39908cd3ab7b8e5bd3ba269e152b947
name: B39908CD3AB7B8E5BD3BA269E152B947.mlw
sha1: 85e648c881a0675dbe0d1242db7f3e0d62b4df69
sha256: 78316a80b6e2a01d311a8bb2cff70baee877468146a5bd40d8d07e2c7c3c0526
sha512: 27ba88c47b25f0423a4e6a4ac7b27c7bacb5b8880f82fd97273ed632eebc86dc7854ceddf6fa2fdae4ac1113ba4f0cedbe521b53f21a8ea235a23b68d4ff8aaf
ssdeep: 49152:tL+qeDBlkimaxsxJfSRXi88b9fmmMgB5jwa6DA+dqOkw:3eD/O+oA78BfRB5sPAEqLw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName:
FileVersion: 1.0.0.4
CompanyName: Synaptics
LegalTrademarks:
Comments:
ProductName: Synaptics Pointing Device Driver
ProductVersion: 1.0.0.0
FileDescription: Synaptics Pointing Device Driver
OriginalFilename:
Translation: 0x041f 0x04e6

Razy.719705 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005239691 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.719705
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/APosT.26dfd9c9
K7GWTrojan ( 0057543a1 )
Cybereasonmalicious.d3ab7b
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.NoobyProtect.H suspicious
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.APosT.non
BitDefenderGen:Variant.Razy.719705
MicroWorld-eScanGen:Variant.Razy.719705
Ad-AwareGen:Variant.Razy.719705
SophosMal/Generic-S
ComodoTrojWare.Win32.Amtar.KNB@4wlm66
BitDefenderThetaGen:NN.ZexaF.34758.7v0@aOHp6fgH
TrendMicroTROJ_GEN.R005C0WFL21
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
FireEyeGeneric.mg.b39908cd3ab7b8e5
EmsisoftGen:Variant.Razy.719705 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1135156
eGambitUnsafe.AI_Score_100%
MicrosoftProgram:Win32/Wacapew.C!ml
GridinsoftTrojan.Heur!.03010121
GDataWin32.Application.PUPStudio.B
AhnLab-V3Malware/Win.Generic.C4530500
Acronissuspicious
McAfeeArtemis!B39908CD3AB7
MAXmalware (ai score=89)
MalwarebytesLamer.Virus.FileInfector.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R005C0WFL21
YandexTrojan.GenAsa!oSg9Hu4ydds
IkarusPUA.NoobyProtect
FortinetRiskware/APosT
AVGWin32:Malware-gen

How to remove Razy.719705?

Razy.719705 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment