Categories: Malware

Razy.802946 information

The Razy.802946 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.802946 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Presents an Authenticode digital signature
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.802946?


File Info:
crc32: F03ED3AFmd5: 136b75b273e9889814978d89a2f304bename: 136B75B273E9889814978D89A2F304BE.mlwsha1: e384d4b120d6bc072e5517ecfe30e17cea8b901esha256: 692aa8adc305de52bc4c784fc272aaf943b4f8128162b712b24444342078c751sha512: 6272c00f4ebc3518cb98a4147c504078f7d675c4ba9c0e283b50986292c378970f445175ec187e86254f153708d570a7ce0261d54d4e265fbd6add919263326bssdeep: 3072:MU5X9BrbGJ/V37wg4MuYXV8zPYkY35oOp:lzlqPL94MVtv5xtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Razy.802946 also known as:

Bkav	W32.malware.sig1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.802946
ALYac	Trojan.Agent.QakBot
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Gen:Variant.Razy.802946
K7GW	Spyware ( 0040f0131 )
Cyren	W32/Trojan.FSZ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
Kaspersky	Trojan-Banker.Win32.RTM.fcr
Alibaba	TrojanBanker:Win32/BankerX.23700079
ViRobot	Trojan.Win32.Z.Qbot.2135808
AegisLab	Hacktool.Win32.Krap.lKMc
Rising	Trojan.Generic@ML.87 (RDMK:kTmWwNJ1rEjgZFZ8iVV8/A)
Ad-Aware	Gen:Variant.Razy.802946
Emsisoft	MalCert.A (A)
F-Secure	Trojan.TR/AD.Qbot.wbnfj
DrWeb	BackDoor.Qbot.562
TrendMicro	Trojan.Win32.MALREP.THLAOBO
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.136b75b273e98898
Sophos	ML/PE-A + Mal/EncPk-APV
Ikarus	Backdoor.QBot
Webroot	W32.Trojan.Qakbot
Avira	TR/AD.Qbot.wbnfj
MAX	malware (ai score=83)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Kingsoft	Win32.Troj.Banker.(kcloud)
Microsoft	Trojan:Win32/QakBot.MW!MTB
Gridinsoft	Trojan.Win32.Agent.oa
Arcabit	Trojan.Razy.DC4082
ZoneAlarm	Trojan-Banker.Win32.RTM.fcr
GData	Gen:Variant.Razy.802946
Cynet	Malicious (score: 100)
McAfee	GenericRXAA-AA!136B75B273E9
VBA32	BScope.Backdoor.Qbot
Malwarebytes	Backdoor.Qbot
Panda	Trj/CI.A
ESET-NOD32	Win32/Qbot.CU
TrendMicro-HouseCall	Trojan.Win32.MALREP.THLAOBO
Yandex	Trojan.Kryptik!T4aJTKZAwpw
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Kryptik.HDNN!tr
BitDefenderTheta	Gen:NN.ZedlaF.34688.cU6@aG9N2pdi
AVG	Win32:DangerousSig [Trj]
Avast	Win32:DangerousSig [Trj]
Qihoo-360	Generic/Trojan.BO.c77