Categories: Malware

Razy.779843 malicious file

The Razy.779843 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.779843 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes its original binary from disk
Anomalous binary characteristics

How to determine Razy.779843?


File Info:
name: F227411FF86B26DB3C21.mlwpath: /opt/CAPEv2/storage/binaries/129527841db54a28a44ce95fa4c2c03874e25bf6b10627c52d60940c26d86559crc32: F85A9093md5: f227411ff86b26db3c21bb018a5edc50sha1: 906c5d8132499595075b5564ff90a8635951a212sha256: 129527841db54a28a44ce95fa4c2c03874e25bf6b10627c52d60940c26d86559sha512: 642b398e8de115c5215f84b986165191a9a96714edc7c51982ad01069020be7d83df89807b1dee5623942679cfbda535fbde59e59ef290d99a22a0c69c2f917fssdeep: 12288:OTY26CMvOSfcWmQuOB5G4vZRvua801FtZHgxfI8x:ITQuExZR2dQF2fI8xtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T197D4DFEB73953145EF2C8BBBE2A11889733465232F57CACDE34D5E92A1F2902DD4C924sha3_384: bb9b8ae7fddd288b5088e71269825c3d2cd64c7941ab723f037488e63358180f31de29fa7f068fcec49a52eed91382e6ep_bytes: e8ad030000e935fdffff558bec81ec28timestamp: 2013-11-21 08:02:26
Version Info:
0: [No Data]

Razy.779843 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.QuchiSpy.4!c
Elastic	malicious (high confidence)
DrWeb	Adware.Cinmus.35582
Cynet	Malicious (score: 100)
FireEye	Generic.mg.f227411ff86b26db
CAT-QuickHeal	Trojan.Beaugrit.28161
ALYac	Gen:Variant.Razy.779843
Cylance	Unsafe
VIPRE	Trojan-Dropper.Win32.XoredBinary.b (v)
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Spyware ( 004c985e1 )
Alibaba	TrojanSpy:Win32/QuchiSpy.b526c4e4
K7GW	Spyware ( 004c985e1 )
Cybereason	malicious.ff86b2
BitDefenderTheta	Gen:NN.ZexaF.34212.MqY@aaZzUzhi
VirIT	Trojan.Win32.Agent.BEAM
Cyren	W32/S-2d7708fb!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Agent.OAU
TrendMicro-HouseCall	Cryp_Xin2
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Agent-7822521-0
Kaspersky	Trojan-Spy.Win32.QuchiSpy.c
BitDefender	Gen:Variant.Razy.779843
NANO-Antivirus	Trojan.Win32.Agent.ctbxfs
MicroWorld-eScan	Gen:Variant.Razy.779843
Tencent	Malware.Win32.Gencirc.10b3cd9a
Ad-Aware	Gen:Variant.Razy.779843
Emsisoft	Gen:Variant.Razy.779843 (B)
Comodo	Malware@#3h23wnyml1fp3
Baidu	Win32.Trojan-Spy.Agent.i
Zillya	Trojan.QQLogger.Win32.569
TrendMicro	Cryp_Xin2
McAfee-GW-Edition	GenericRXAJ-NU!F227411FF86B
Sophos	Mal/Generic-S (PUA)
GData	Gen:Variant.Razy.779843
Jiangmin	TrojanSpy.QuchiSpy.ar
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1208171
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	Win32.Troj.QuchiSpy.c.(kcloud)
ZoneAlarm	Trojan-Spy.Win32.QuchiSpy.c
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Packed/Win32.Suspicious.C258537
McAfee	GenericRXAJ-NU!F227411FF86B
MAX	malware (ai score=100)
VBA32	TrojanSpy.QuchiSpy
Malwarebytes	Generic.Malware/Suspicious
APEX	Malicious
Rising	Trojan.Agent!1.9E37 (CLOUD)
Yandex	TrojanSpy.Agent!ad8iiFeZrW8
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Generic.AC.2070294
AVG	Win32:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)