Malware

About “Razy.811328” infection

Malware Removal

The Razy.811328 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.811328 virus can do?

  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process attempted to delay the analysis task by a long amount of time.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Razy.811328?


File Info:

crc32: 50D51EAB
md5: 0dd3a14f922feac556d68299ea87ca26
name: 0DD3A14F922FEAC556D68299EA87CA26.mlw
sha1: b50147d1858df890f61397acf8e3ae681a55f122
sha256: a228352ae6a5f8ba4dcf5c4d38e9ea8a6a2f233f9d10d8a49222454dbc453303
sha512: 6b1fe7181e9e6e8b9227e813fbd1d695d15585012a278e9c8046c9fe44f8b5413816a0a2118c15874f26cf5ad30f78be6b0651012a7757dc820e44be7599cb13
ssdeep: 1536:vef3y7HmMzGv1s8CGU31rAUj4ZFYr7Ap7N9zvcEYwMt6vMDQZwsWyxucdbu0ylW:2vy7GMzGvGGKh7jcFYr78vvcElk8db9
type: PE32 executable (DLL) (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Razy.811328 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.811328
FireEyeGeneric.mg.0dd3a14f922feac5
CAT-QuickHealTrojan.Wacatac
ALYacGen:Variant.Razy.811328
CylanceUnsafe
AegisLabTrojan.Win32.Zusy.4!c
BitDefenderGen:Variant.Razy.811328
K7GWTrojan ( 0056786a1 )
K7AntiVirusTrojan ( 0056786a1 )
SymantecML.Attribute.HighConfidence
AvastWin32:Trojan-gen
AlibabaTrojan:Win32/Generic.0ec8ea18
ViRobotTrojan.Win32.Z.Agent.89088.AKV
RisingTrojan.Generic@ML.83 (RDMK:PWPHIHd7SODW3OuEmcAKIg)
Ad-AwareGen:Variant.Razy.811328
EmsisoftTrojan.Agent (A)
ComodoMalware@#2c93rz61ad4c
DrWebTrojan.DownLoad4.14217
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
IkarusTrojan.Win32.Agent
WebrootW32.Trojan.Gen
AviraTR/Agent.hmzyx
MAXmalware (ai score=99)
MicrosoftTrojan:Win32/CryptInject!ml
GridinsoftTrojan.Win32.Agent.oa
ArcabitTrojan.Razy.DC6140
GDataGen:Variant.Razy.811328
CynetMalicious (score: 100)
McAfeeGenericRXAA-AA!0DD3A14F922F
PandaTrj/RnkBend.A
ESET-NOD32a variant of Win32/Agent.ABYS
TrendMicro-HouseCallTROJ_GEN.R002H09LJ20
FortinetW32/Agent.ABYS!tr
BitDefenderThetaGen:NN.ZedlaF.34700.fq4@aSg6DQh
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Generic/Trojan.1e6

How to remove Razy.811328?

Razy.811328 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment