Categories: Malware

Razy.766664 removal

The Razy.766664 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.766664 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Creates a copy of itself
Collects information to fingerprint the system

How to determine Razy.766664?


File Info:
crc32: 87523AA5md5: b9cdf7c452ac0e50fcc4bbe6f29a1d1ename: B9CDF7C452AC0E50FCC4BBE6F29A1D1E.mlwsha1: 68679f5d94b03d3794b37ef26a0ec78cb3738929sha256: 747b4da6c8d535d29f2165578f407635c9284085a785acc63b44ce492cf65f2dsha512: 880c1ce181c4e3f2b6cb88d265d76c981d45bafa09bdd2cf1fb5b7229464aa62d0c884a511ff69638870da547ea86e4063972300290f0c60c4d5871dfb6d0f68ssdeep: 3072:J32FwgDOPsISj8XmVwpYS+NPa06Ukr+5EX9lGkwyE:F2F/06j1m2Sx06Ukr+5kfG2type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Beeps (Shin Rack) 2001-2005InternalName: RuralFileVersion: 3, 6, 9CompanyName: AhakanProductName: NopeProductVersion: 3, 6FileDescription: Gas Nat TermOriginalFilename: Chlqi.exeTranslation: 0x0409 0x04b0

Razy.766664 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader7.50043
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.766664
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.2643
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Cybereason	malicious.452ac0
Symantec	Trojan.Gen
ESET-NOD32	Win32/Lyposit.A
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.kxoy
BitDefender	Gen:Variant.Razy.766664
NANO-Antivirus	Trojan.Win32.Blocker.btouvn
MicroWorld-eScan	Gen:Variant.Razy.766664
Tencent	Win32.Trojan.Blocker.Pikb
Ad-Aware	Gen:Variant.Razy.766664
Sophos	Mal/Generic-R + Mal/EncPk-AIQ
Comodo	Malware@#1nxm65jzywse4
BitDefenderTheta	Gen:NN.ZexaF.34670.gmKfaCRmR!ai
VIPRE	Trojan.Win32.Lyposit.ba (v)
McAfee-GW-Edition	PWS-Zbot-FANY!B9CDF7C452AC
FireEye	Generic.mg.b9cdf7c452ac0e50
Emsisoft	Gen:Variant.Razy.766664 (B)
Jiangmin	Trojan/Blocker.hnf
Webroot	W32.Rogue.Gen
Avira	HEUR/AGEN.1101722
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ditertag.A
GData	Gen:Variant.Razy.766664
Acronis	suspicious
McAfee	PWS-Zbot-FANY!B9CDF7C452AC
MAX	malware (ai score=81)
VBA32	Malware-Cryptor.ImgChk
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/CI.A
Rising	Ransom.Lyposit!8.1E79 (CLOUD)
Yandex	Trojan.Blocker!WY++ld3ecEs
Ikarus	Trojan-PWS.Win32.Zbot
Fortinet	W32/Kryptik.ASJO!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HxIBEpsA