Categories: Malware

Should I remove “Razy.763347 (B)”?

The Razy.763347 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.763347 (B) virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.763347 (B)?


File Info:
crc32: 0EE48843md5: cc0e3a322e1ff0873e5dfa71d14a3f01name: CC0E3A322E1FF0873E5DFA71D14A3F01.mlwsha1: a42be6ba28bd7463586fffda69982a002b5d6d84sha256: f784ca276fd6aeec66583d77bdb2efcccaa8d94c53810da777d4b59e5679343csha512: b5f07cb92ac8b86f4198960f12c505e9bfa3d01213719dd04239462171c650280908cadd49257a46831b16c86405152d86bd965814fe40509a7f642505a10145ssdeep: 768:G7RBhwxj2Mtj7EELw/7a1vhMPeO7xdWUAohfjiT5ediYqdvDtD51pl2E:Glo2MtVMjS5MPvL0qfWT5MAbXpYtype: PE32 executable (Unknown subsystem 0x0) Unknown processor type 0x0 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
LegalCopyright: ? Microsoft Corporation. All rights reserved.InternalName: FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)CompanyName: Microsoft CorporationPrivateBuild: LegalTrademarks: Comments: ProductName: Microsoft? Windows? Operating SystemSpecialBuild: ProductVersion: 6.1.7600.16385FileDescription: Windows Enhanced Storage Password Authentication ProgramOriginalFilename: EhStorAuthn.exeTranslation: 0x0804 0x04b0

Razy.763347 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader18.16955
ClamAV	Win.Malware.38aba-9860044-0
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Gen:Variant.Razy.763347
Malwarebytes	Nimnul.Virus.FileInfector.DDS
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.22e1ff
Baidu	Win32.Trojan.ServStart.ax
Cyren	W32/Nitol.K.gen!Eldorado
Symantec	SMG.Heur!gen
APEX	Malicious
Avast	Win32:Nitol-A [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.PornoBlocker.ejtx
BitDefender	Gen:Variant.Razy.763347
NANO-Antivirus	Trojan.Win32.MicroFake.cchebz
MicroWorld-eScan	Gen:Variant.Razy.763347
Tencent	Trojan.Win32.Lapka.bw
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Nitol.KA@6cq5hu
BitDefenderTheta	Gen:NN.ZedlaF.34088.aC4@aqpv5Bei
VIPRE	BehavesLike.Win32.Malware.wsc (mx-v)
TrendMicro	DDoS.Win32.NITOL.SMG
McAfee-GW-Edition	BehavesLike.Win32.Fake.km
FireEye	Gen:Variant.Razy.763347
Emsisoft	Gen:Variant.Razy.763347 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.ovbd
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASBOL.791
Microsoft	DDoS:Win32/Nitol.P!bit
Arcabit	Trojan.Razy.DBA5D3
GData	Win32.Trojan.Microfake.A
AhnLab-V3	Trojan/Win32.PornoBlocker.C4226100
Acronis	suspicious
McAfee	GenericRXEN-BW!CC0E3A322E1F
MAX	malware (ai score=82)
TrendMicro-HouseCall	DDoS.Win32.NITOL.SMG
Rising	Trojan.Nitol!1.C6A5 (CLASSIC)
Yandex	Trojan.GenAsa!dzjt+DN9mv0
Ikarus	Trojan.Win32.MicroFake
AVG	Win32:Nitol-A [Trj]