Razy.746376 removal

The Razy.746376 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.746376 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.746376?


File Info:
crc32: BC4FC71D
md5: 06c8f5b83d075c31a787d763b70d7789
name: 06C8F5B83D075C31A787D763B70D7789.mlw
sha1: 1c285c7d2ef37b3d7e53df1b67deb2d81326e6c8
sha256: 74834bc5ab63be9a1793657db1d38b3128bfe50e3f04683672e57d1785b561d8
sha512: c10920d877ce4a1884a83a211e1158f6c3ca817151ff63a21d92c89b9561dbafcbb285692244a5391234e9d529c3f28ec4c60f3c5b906af0e6fe867f0f05e487
ssdeep: 3072:fD2f3YMUoyYYUPbeEEx/MSAGFsx2kVr5umhqROvMDyaLOsD:fD2/YMUoyYYoK/7tzkNumsROvV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Rhytacilfm Ddrenitcoo 1995-2011
InternalName: Rhytacilfm
FileVersion: 106, 27, 51, 16
CompanyName: Rhytacilfm Ddrenitcoo
ProductName: Rhytacilfm Dpmfuepiqp Nxgowy
ProductVersion: 123, 79, 113, 96
FileDescription: Rhytacilfm Dpmfuepiqp Nxgowy
OriginalFilename: Rhytacilfm.exe
Translation: 0x0409 0x04e4

Razy.746376 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Spyware ( 0055e3db1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Panda.10584
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.746376
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.38382
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:Win32/FAKEAV.62d92373
K7GW	Spyware ( 0055e3db1 )
Cybereason	malicious.83d075
Symantec	W32.Qakbot!gen5
ESET-NOD32	Win32/Spy.Zbot.YW
APEX	Malicious
Avast	Win32:MalOb-FS [Cryp]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Razy.746376
NANO-Antivirus	Trojan.Win32.Zbot.dggdx
MicroWorld-eScan	Gen:Variant.Razy.746376
Tencent	Win32.Trojan.Generic.Gvo
Ad-Aware	Gen:Variant.Razy.746376
Sophos	ML/PE-A + Mal/Zbot-AV
Comodo	Malware@#37b4iddheh57h
BitDefenderTheta	Gen:NN.ZexaF.34266.fr0@ay2TVYcc
VIPRE	Trojan.Win32.Kryptik.mcf (v)
TrendMicro	TROJ_FAKEAV.SMUB
McAfee-GW-Edition	BehavesLike.Win32.Emotet.tm
FireEye	Generic.mg.06c8f5b83d075c31
Emsisoft	Gen:Variant.Razy.746376 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Zbot.biay
Avira	TR/Crypt.ZPACK.Gen9
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.4193A8
Microsoft	PWS:Win32/Zbot!ZA
Arcabit	Trojan.Razy.DB6388
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
GData	Gen:Variant.Razy.746376
McAfee	PWS-Zbot.gen.fw
MAX	malware (ai score=99)
VBA32	Trojan.Zbot.01371
Panda	Bck/Qbot.AO
TrendMicro-HouseCall	TROJ_FAKEAV.SMUB
Rising	Trojan.Generic@ML.93 (RDML:mKGOKOqpdY1nsf/grxJ0gg)
Yandex	Trojan.Agent!XNmm1gSbHPA
Ikarus	Net-Worm.Win32.Kolab
Fortinet	W32/PackFakeAV.JX!tr
AVG	Win32:MalOb-FS [Cryp]
Paloalto	generic.ml

How to remove Razy.746376?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.