Categories: Malware

How to remove “Razy.719705”?

The Razy.719705 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.719705 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial language used in binary resources: Turkish
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

xred.mooo.com

freedns.afraid.org

How to determine Razy.719705?


File Info:
crc32: BCEDF9B9md5: b39908cd3ab7b8e5bd3ba269e152b947name: B39908CD3AB7B8E5BD3BA269E152B947.mlwsha1: 85e648c881a0675dbe0d1242db7f3e0d62b4df69sha256: 78316a80b6e2a01d311a8bb2cff70baee877468146a5bd40d8d07e2c7c3c0526sha512: 27ba88c47b25f0423a4e6a4ac7b27c7bacb5b8880f82fd97273ed632eebc86dc7854ceddf6fa2fdae4ac1113ba4f0cedbe521b53f21a8ea235a23b68d4ff8aafssdeep: 49152:tL+qeDBlkimaxsxJfSRXi88b9fmmMgB5jwa6DA+dqOkw:3eD/O+oA78BfRB5sPAEqLwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: FileVersion: 1.0.0.4CompanyName: SynapticsLegalTrademarks: Comments: ProductName: Synaptics Pointing Device DriverProductVersion: 1.0.0.0FileDescription: Synaptics Pointing Device DriverOriginalFilename: Translation: 0x041f 0x04e6

Razy.719705 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005239691 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.719705
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/APosT.26dfd9c9
K7GW	Trojan ( 0057543a1 )
Cybereason	malicious.d3ab7b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.NoobyProtect.H suspicious
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.APosT.non
BitDefender	Gen:Variant.Razy.719705
MicroWorld-eScan	Gen:Variant.Razy.719705
Ad-Aware	Gen:Variant.Razy.719705
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Amtar.KNB@4wlm66
BitDefenderTheta	Gen:NN.ZexaF.34758.7v0@aOHp6fgH
TrendMicro	TROJ_GEN.R005C0WFL21
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.b39908cd3ab7b8e5
Emsisoft	Gen:Variant.Razy.719705 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1135156
eGambit	Unsafe.AI_Score_100%
Microsoft	Program:Win32/Wacapew.C!ml
Gridinsoft	Trojan.Heur!.03010121
GData	Win32.Application.PUPStudio.B
AhnLab-V3	Malware/Win.Generic.C4530500
Acronis	suspicious
McAfee	Artemis!B39908CD3AB7
MAX	malware (ai score=89)
Malwarebytes	Lamer.Virus.FileInfector.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R005C0WFL21
Yandex	Trojan.GenAsa!oSg9Hu4ydds
Ikarus	PUA.NoobyProtect
Fortinet	Riskware/APosT
AVG	Win32:Malware-gen