Categories: Malware

Razy.783956 removal tips

The Razy.783956 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.783956 virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Deletes its original binary from disk
Likely virus infection of existing system binary
Attempts to modify proxy settings
Creates a copy of itself
Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

cfyuanji.blog.163.com

blog.163.com

How to determine Razy.783956?


File Info:
crc32: 40D683C9md5: d8558ce5ca67f527478c309add3e07c0name: D8558CE5CA67F527478C309ADD3E07C0.mlwsha1: 7bfe8acf8470df5a49e0a4453d79399f7c7c78edsha256: 69e2ff70bdbe7199b2d7511bb50365a69be00a1182d9ad924bd2ca8df4b18a2csha512: 7fbe3dceb0403171fd9f2d6d44e48ed43bf5ae4c74bfdeb7a69e7f7fb398944994062a5702158e6af4d3357bed5271a303b7e97b04c1579e556983ad707fb507ssdeep: 24576:Z7JjJWQ3bdsTOMYIGjQU6rsC+mapctqTbG39zY:ZPlCTRYYU6rx2cU+Ytype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: CFx51b0x6613x7f51x6e38x521bx5efax7a7ax767dx540dx751fx6210x5668FileVersion: 1.0.0.0CompanyName: x6e90x5409Comments: YYxff1a3419x6e90x5409x5236x4f5cProductName: YYxff1a3419x6e90x5409x5236x4f5cProductVersion: 1.0.0.0FileDescription: YYxff1a3419x6e90x5409x5236x4f5cTranslation: 0x0804 0x04b0

Razy.783956 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.783956
FireEye	Generic.mg.d8558ce5ca67f527
CAT-QuickHeal	Trojan.Mauvaise.SL1
Qihoo-360	HEUR/QVM19.1.455B.Malware.Gen
McAfee	Artemis!D8558CE5CA67
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Razy.783956
Cybereason	malicious.f8470d
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Malware.Ulise-6859144-0
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Trojan.Agent!1.68AC (CLASSIC)
Ad-Aware	Gen:Variant.Razy.783956
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
DrWeb	Trojan.KillProc.56563
Invincea	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tm
Emsisoft	Gen:Variant.Razy.783956 (B)
Ikarus	Trojan.Win32.Skeeyah
Jiangmin	Trojan.Generic.glpqs
MAX	malware (ai score=81)
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Microsoft	Trojan:Win32/Presenoker
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Application.FlyStudio.F
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C1016925
Acronis	suspicious
ALYac	Gen:Variant.Razy.783956
Malwarebytes	RiskWare.FlyStudio
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Yandex	Trojan.GenAsa!haKF26ELk3c
SentinelOne	Static AI – Malicious PE
eGambit	HackTool.Generic
Fortinet	Adware/FlyStudio
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen