Categories: Malware

About “Razy.790404” infection

The Razy.790404 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.790404 virus can do?

Uses Windows utilities for basic functionality
Deletes its original binary from disk
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.790404?


File Info:
crc32: B4A3567Amd5: c27c20daf13c9e86609b5c5469b8044aname: C27C20DAF13C9E86609B5C5469B8044A.mlwsha1: 0c0e524eed953362a6e3de9ec52911165975adc8sha256: a82edf09e19fee78d743b2c36e6b9e4531c646b128f8456e6a275ce6cb586c44sha512: b932e1b8d752383d9680454777b15212452daebe66dd460ce958c5ace853ca198354cd9da5ae7b1dfd933ae2f6c2cb4c3d32fcd8c2f78d2ac05c8379b0edd806ssdeep: 768:rbHUA9nK/Ep2nFUGkyViw0zRrpdn1MoGce/yCjkQ4URpgZg:rbHUr8RyAHJr1MoRg3f1emtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.790404 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.790404
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.6883
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Magni.16d26b1d
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.af13c9
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.Magniber.A
APEX	Malicious
Avast	Win32:ShellCode-CY [Ransom]
Kaspersky	Trojan-Ransom.Win32.Magni.n
BitDefender	Gen:Variant.Razy.790404
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Variant.Razy.790404
Tencent	Win32.Trojan.Magni.Swum
Ad-Aware	Gen:Variant.Razy.790404
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34722.cqW@aif!nTg
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.MAGNIBER.SMTH
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.nm
FireEye	Generic.mg.c27c20daf13c9e86
Emsisoft	Gen:Variant.Razy.790404 (B)
Jiangmin	Trojan.Magni.e
Avira	HEUR/AGEN.1115151
Antiy-AVL	Trojan/Generic.ASMalwS.2377887
Microsoft	Trojan:Win32/Tiggre!rfn
AegisLab	Trojan.Win32.Magni.j!c
ZoneAlarm	Trojan-Ransom.Win32.Magni.n
GData	Gen:Variant.Razy.790404
TACHYON	Ransom/W32.Magni.39936
AhnLab-V3	Trojan/Win32.Magniber.R216970
McAfee	Artemis!C27C20DAF13C
MAX	malware (ai score=99)
VBA32	Hoax.Magni
Malwarebytes	Malware.AI.3647261247
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.MAGNIBER.SMTH
Rising	Trojan.Obfuscated!1.9A68 (CLASSIC)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Filecoder_Magniber.A!tr
AVG	Win32:ShellCode-CY [Ransom]
Paloalto	generic.ml