What is “Razy.856574 (B)”?

The Razy.856574 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.856574 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Presents an Authenticode digital signature
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Razy.856574 (B)?

File Info:
name: E49296E657B22E02CB39.mlw
path: /opt/CAPEv2/storage/binaries/815dc5bbd699a50e4213c322acc92b567b9f772bd2a4bd3e3ca24492478e92a4
crc32: BF1918A2
md5: e49296e657b22e02cb391ea03e217e53
sha1: 1915a7db4021de3bbf1c83a15adeeed5cd62b5f3
sha256: 815dc5bbd699a50e4213c322acc92b567b9f772bd2a4bd3e3ca24492478e92a4
sha512: 71255b85f079d713f2d32f21c2a4eb45cf58658ddbb662c2e062d6bc0c2e11377b0db2e1ad3de8facc1bff615e5358154b7b0b4b60a18ab9fae82606863a2067
ssdeep: 196608:rp3kURYJl/6/LD8I4rwz9bJMQ6br+6bikW7/H4d4eeNIcUz+:rpUdx6X1aEb6bS7/HheL+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B4A6334F5B0BCA1EF6746135D336B5F1A4C0BE15EE080297A1373DA7BA7E6801C6B099
sha3_384: 5e7dcee2083142718e400cc0764cdb73929f16b75f06cc5acf11afa8c1694d5e274653f793acf2edcdddae23f05863ab
ep_bytes: 60be0040d1008dbe00d06effc787ec70
timestamp: 2008-12-02 15:41:29

Version Info:
0: [No Data]

Razy.856574 (B) also known as:

How to remove Razy.856574 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.