Razy.784311 removal

The Razy.784311 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.784311 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system

Related domains:

timetengstell.com

kuqerugpz.info

basnkqzsp.ru

pkiacfneda.com

uxmjpevvmjj.net

nsxhzmlq.ru

bqzgjwybprs.com

xfiovengv.xyz

gxaeynhxmnj.info

eozcdxdxk.com

xxfewcg.xyz

ofoiltnadnz.info

How to determine Razy.784311?


File Info:
crc32: 033EC357
md5: 1f07045a7905515d0d6a09d44de9be3c
name: 1F07045A7905515D0D6A09D44DE9BE3C.mlw
sha1: 5a484556e4e1042ef5bddd061a2ccc4e2dde4d7c
sha256: 1a1d3e87cc9cad6c7b310c73af94beadc61fe362cdf6401d321ba1f21696a763
sha512: 714bfb4641ee895920dad77fb5a440b07108a30af05da6d005717659d9f0f240fb105b0aadde9ba0bbfdad5f6d65c05c0fdd0bdef8946879c68e7c4ff020985d
ssdeep: 6144:ggItI/tRhdObSj9dpSzOX/o6+9IWMdv+PunF:rR9SMuSWMsmF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2004 Samsung Electronics Co., Ltd.
InternalName: Image Editor
FileVersion: 4.06.21
CompanyName: Samsung Electronics Co., Ltd.
Comments: Developed by Oleg T. Kosachevsky
ProductName: Samsung SmarThru v.4
ProductVersion: 4.06.21
FileDescription: Samsung SmarThru (Image Editor)
OriginalFilename: ImageEditor.exe
Translation: 0x0409 0x04e4

Razy.784311 also known as:

K7AntiVirus	Trojan ( 004c63f11 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Razy.784311
Cylance	Unsafe
Sangfor	Trojan.Win32.Waldek.bfbr
CrowdStrike	win/malicious_confidence_90% (D)
BitDefender	Gen:Variant.Razy.784311
K7GW	Trojan ( 004c63f11 )
Cybereason	malicious.a79055
BitDefenderTheta	Gen:NN.ZexaF.34236.mu0@aCItbJbi
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.DKLG
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Waldek.bfbr
NANO-Antivirus	Trojan.Win32.Kryptik.fctbtq
MicroWorld-eScan	Gen:Variant.Razy.784311
Tencent	Win32.Trojan.Generic.Dyqp
Ad-Aware	Gen:Variant.Razy.784311
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Ransom.Nymaim.BA@5sx9v3
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HPLOCKY.SMLY3
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
FireEye	Generic.mg.1f07045a7905515d
Emsisoft	Gen:Variant.Razy.784311 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1141037
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Razy.DBF7B7
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
ZoneAlarm	Trojan.Win32.Waldek.bfbr
GData	Gen:Variant.Razy.784311
McAfee	Trojan-FGNS!1F07045A7905
MAX	malware (ai score=99)
TrendMicro-HouseCall	Ransom_HPLOCKY.SMLY3
Rising	Trojan.Generic@ML.88 (RDML:YW5qwcIS2UuXYdVs7Vsp4Q)
Yandex	Trojan.Waldek!CLBNZivIhws
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.DMHD!tr
Panda	Trj/Genetic.gen

How to remove Razy.784311?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.