Malware

Should I remove “Razy.866955 (B)”?

Malware Removal

The Razy.866955 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Razy.866955 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

cutit.org
q.gs
hurirk.net

How to determine Razy.866955 (B)?


File Info:

crc32: F99FFFB0
md5: fbcf394b377f45d291e42279176880e5
name: FBCF394B377F45D291E42279176880E5.mlw
sha1: 390f436655cd00b219086778ab3f3254fa84780d
sha256: e6c7462e41bd19477985feaf8abaada942aa0da28d2cd576af5c848d0d9a69f9
sha512: f31c982bdcc3729ac0a96335233f5fe72dee7b31cbae5df52a4b51a4c63ece5a90173cba2031bf22103f091060515660a62b951da423af8f2d63617062ef0dc5
ssdeep: 12288:CWj1oyra/BMBje9g0DnmTfbI7B1CENje9g0Dnf:CSKBAamTbI91Laf
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Razy.866955 (B) also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0057cf3b1 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.866955
CylanceUnsafe
ZillyaTrojan.Copak.Win32.90870
SangforTrojan.Win32.Save.a
K7GWTrojan ( 0057cf3b1 )
Cybereasonmalicious.b377f4
CyrenW32/Kryptik.DZR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Razy.866955
NANO-AntivirusTrojan.Win32.Packed2.iysdfx
MicroWorld-eScanGen:Variant.Razy.866955
TencentMalware.Win32.Gencirc.11ce58d7
Ad-AwareGen:Variant.Razy.866955
SophosMal/HckPk-A
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34170.HmZ@aeBy@@e
McAfee-GW-EditionBehavesLike.Win32.Dropper.hm
FireEyeGeneric.mg.fbcf394b377f45d2
EmsisoftGen:Variant.Razy.866955 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.lhv
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.334449F
MicrosoftTrojan:Win32/Injector.RAQ!MTB
GDataGen:Variant.Razy.866955
AhnLab-V3Malware/Win32.Generic.C2860595
McAfeeGenericRXAA-AA!FBCF394B377F
MAXmalware (ai score=85)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.97 (RDML:DaeWziJgh9yhiDLt8yyf5Q)
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:Evo-gen [Susp]

How to remove Razy.866955 (B)?

Razy.866955 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment