Categories: Malware

Should I remove “Razy.850642”?

The Razy.850642 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.850642 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Razy.850642?


File Info:
name: DBE6D9CC9FA40C830D41.mlwpath: /opt/CAPEv2/storage/binaries/9cb2b4a0927f9420455e8fba1f5a0f14875109c11d1d9a192ff943a647532d22crc32: 23B1D63Emd5: dbe6d9cc9fa40c830d41321cd40bdab8sha1: 81b0f49941a7bc25215758b8652c319769259e39sha256: 9cb2b4a0927f9420455e8fba1f5a0f14875109c11d1d9a192ff943a647532d22sha512: e56a7f9b5a2591037b5980eb368b4aff386f3925eaee1f6932896c217dbd7f02c09553c14b08b11c3d133f36f3214dbb07d9a27b7acd0ee740ae3fc52a53769cssdeep: 768:IOg167GTCGTL9tCqwhX52pwTu5gV62i9wb4CWYLyAKfPXvByNGGeLDd5FBEewtij:s0Y9WV32pau5gV62++Kf/vwrid5UZi4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11D836D5BB9B37571D98502B200A7C3729C69BD352E2F25F1E3051A31E746A68FF0C62Esha3_384: c4ffbb83d6838074eee33feaf48618da48e37fb40ce8beed3d83db4a7d3e0ba739ba6703b349b8d18d605ce131f0173aep_bytes: 55b878160000575653e807280000c744timestamp: 2007-01-22 21:51:22
Version Info:
0: [No Data]

Razy.850642 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Razy.850642
CAT-QuickHeal	Downloader.Agent.27044
McAfee	GenericRXCG-HN!DBE6D9CC9FA4
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Razy.850642
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005983e51 )
Alibaba	Trojan:Win32/Vilsel.9a15
K7GW	Trojan ( 005983e51 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Agent.ENI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDownloader.Agent.NIV
APEX	Malicious
ClamAV	Win.Trojan.Agent-783652
Kaspersky	Trojan.Win32.Vilsel.csjl
BitDefender	Gen:Variant.Razy.850642
NANO-Antivirus	Trojan.Win32.Agent.yvpm
ViRobot	Trojan.Win32.A.Downloader.84496.A
Avast	Win32:Agent-JML [Trj]
Rising	Downloader.Agent!8.B23 (TFE:2:Bb8arfHsHCG)
Emsisoft	Gen:Variant.Razy.850642 (B)
F-Secure	Trojan.TR/Drop.Age.apd.1.E
DrWeb	Trojan.DownLoader.20145
Zillya	Downloader.Agent.Win32.127634
TrendMicro	TROJ_GEN.R002C0DEQ23
McAfee-GW-Edition	BehavesLike.Win32.Generic.mm
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.dbe6d9cc9fa40c83
Sophos	Mal/EncPk-AAT
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.11ZK90B
Jiangmin	TrojanDownloader.Agent.ghz
Avira	TR/Drop.Age.apd.1.E
MAX	malware (ai score=81)
Antiy-AVL	Virus/Win32.Expiro.imp
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Razy.DCFAD2
ZoneAlarm	Trojan.Win32.Vilsel.csjl
Microsoft	TrojanDownloader:Win32/Agent
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Vilsel.R361066
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36196.fqW@ayY9xRf
ALYac	Gen:Variant.Razy.850642
TACHYON	Trojan/W32.Vilsel.86016.AG
Cylance	unsafe
Panda	Generic Malware
Tencent	Trojan.Win32.Vilsel.xaa
Ikarus	Trojan-Dropper.Agent
MaxSecure	Trojan.Malware.73634686.susgen
Fortinet	W32/Agent.APD!tr.dldr
AVG	Win32:Agent-JML [Trj]
Cybereason	malicious.c9fa40
DeepInstinct	MALICIOUS