Malware

Razy.749524 malicious file

Malware Removal

The Razy.749524 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.749524 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Attempts to remove evidence of file being downloaded from the Internet

Related domains:

esureforme100.myddns.rocks

How to determine Razy.749524?


File Info:

crc32: 82827D24
md5: ec4fb9bcd4d0f04bf52462fc9251fab1
name: EC4FB9BCD4D0F04BF52462FC9251FAB1.mlw
sha1: d7fb12bd1f18910586fbdf63b7520474044c06c2
sha256: 5b109baf5c27b68041f902d867bdde2a260cddbea90ecccb09037751ab2bd032
sha512: c3e8f9a92e7331d38f52b28600ddfa98c6da595bd694bb94f00cc98e9d6b9e744db15eae46a4b77a7212767d1574ede0396203c53faa01e4bc016c1269c81369
ssdeep: 12288:7qh52lqanWk9/6pRUbeV1QpqJaY2483C:7SAnWkAMqHJUv3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Razy.749524 also known as:

K7AntiVirusTrojan ( 0056ef3d1 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43049
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.749524
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (W)
AlibabaTrojan:Win32/Injuke.13a9edab
K7GWTrojan ( 0056ef3d1 )
Cybereasonmalicious.cd4d0f
CyrenW32/Kryptik.BKJ.gen!Eldorado
ESET-NOD32Win32/Agent.TJS
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Injuke.eodj
BitDefenderGen:Variant.Razy.749524
NANO-AntivirusTrojan.Win32.Injuke.iulzdu
MicroWorld-eScanGen:Variant.Razy.749524
Ad-AwareGen:Variant.Razy.749524
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34688.5uW@aygWuIhi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.dm
FireEyeGeneric.mg.ec4fb9bcd4d0f04b
EmsisoftGen:Variant.Razy.749524 (B)
AviraTR/Crypt.Agent.ymlqo
MicrosoftTrojan:Win32/Glupteba.VAM!MTB
GridinsoftTrojan.Win32.Agent.oa!s1
GDataGen:Variant.Razy.749524
AhnLab-V3Trojan/Win.Generic.C4439462
McAfeeGenericRXAA-AA!EC4FB9BCD4D0
MAXmalware (ai score=82)
VBA32Trojan.Injuke
MalwarebytesBackdoor.AveMaria
PandaTrj/GdSda.A
RisingBackdoor.Agent!8.C5D (C64:YzY0OlGbNMTQ/PuL)
YandexTrojan.Kryptik!FjlKBsu5D4I
MaxSecureTrojan.Malware.117344179.susgen
FortinetW32/Kryptik.GXKQ!tr
AVGWin32:Malware-gen

How to remove Razy.749524?

Razy.749524 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment