Categories: Malware

Razy.841420 malicious file

The Razy.841420 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.841420 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings

How to determine Razy.841420?


File Info:
crc32: CC3994A9md5: 0a1278a06a4d7bf4b0a152fccf9b8863name: 0A1278A06A4D7BF4B0A152FCCF9B8863.mlwsha1: 0908c23b283f3b4b361b24b2c6716c178d0cc6b3sha256: e8048d57153281e57b4c3937346165aa89f802c9d17c34045b23d2f946817e40sha512: 89d4776eeed59aebf209fbca578ac8f78dcd677d8c8e2de764755ad4771ce1308e35839aae1223fa13fdef96a1ec9b89b207f068cf22bf43586e0bcecfc73b3cssdeep: 12288:llXKhZVSOww88nuNgEGyKw9lQJm4Drh0XJWhPJjiHYgPa8BvxY:7yLwVROPXwH+Dt0gPJji9PNYtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 2011 Sudden instant Corporation. All rights reservedInternalName: Language.dllFileVersion: 2.3.3.763 ApplecatchCompanyName: Sudden instantStretch: Happen silentProductName: Sudden instant Control thinkProductVersion: 2.3.3.763FileDescription: Control thinkOriginalFilename: Language.dllTranslation: 0x0409 0x04b0

Razy.841420 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Razy.841420
FireEye	Generic.mg.0a1278a06a4d7bf4
Qihoo-360	Win32/Trojan.Kryptik.HgkASO0A
McAfee	GenericRXNP-UJ!0A1278A06A4D
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Razy.841420
K7GW	Trojan ( 00577a4f1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FBMH
Kaspersky	Trojan.Win32.Agent.xagjvr
Alibaba	Trojan:Win32/GenKryptik.4ee99d6b
AegisLab	Trojan.Win32.Agent.4!c
Avast	Win32:CrypterX-gen [Trj]
Tencent	Win32.Trojan.Agent.Eek
Ad-Aware	Gen:Variant.Razy.841420
Emsisoft	Trojan.Agent (A)
F-Secure	Trojan.TR/Kryptik.ugnbb
TrendMicro	TROJ_GEN.R002C0WBB21
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Krypt
Avira	TR/Kryptik.ugnbb
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DCD6CC
AhnLab-V3	Malware/Gen.Reputation.C4332695
ZoneAlarm	Trojan.Win32.Agent.xagjvr
GData	Gen:Variant.Razy.841420
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.841420
MAX	malware (ai score=80)
TrendMicro-HouseCall	TROJ_GEN.R002C0WBB21
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
eGambit	Unsafe.AI_Score_85%
Fortinet	W32/GenKryptik.FBMH!tr
AVG	Win32:CrypterX-gen [Trj]