Categories: Malware

About “Razy.871950” infection

The Razy.871950 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.871950 virus can do?

Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Creates a hidden or system file
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.871950?


File Info:
crc32: CA98BF6Fmd5: 62e275d1c4b7bd3d17e92e94f44b0410name: 62E275D1C4B7BD3D17E92E94F44B0410.mlwsha1: 70f2956933ab7c4a0c8fcf7f5be1a7965b292576sha256: 5be96ade5a7a048dff79d94ff48887b0f800bd27b7aefdc3d4f2fa1670f64df1sha512: b7f3debe9c8aba54a450e24eea1e2bd1bbf14eadb54537fe761bdedf4491874567789360af988eaa477069fcfb2a5e6ead8aca45fc83ca1f5c01b1430108dc6bssdeep: 768:fTE2/kB8x4vdiabv4zUVvivgX6vqWrd8IGPhOV:f42AZNcUoS6ZreIG5Etype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248FileVersion: 14.23.28008.0Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: vcruntime140_1ProductVersion: 14.23.28008.0FileDescription: vcruntime140_1Translation: 0x0804 0x04b0

Razy.871950 also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Razy.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop18.7330
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Razy.871950
Cylance	Unsafe
Zillya	Trojan.Bingoml.Win32.5201
Sangfor	Trojan.Win32.Bingoml.cbza
Alibaba	Trojan:Win32/Bingoml.9712f448
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1c4b7b
Cyren	W32/Trojan.ZLLR-8211
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Bingoml.cbza
BitDefender	Gen:Variant.Razy.871950
MicroWorld-eScan	Gen:Variant.Razy.871950
Tencent	Win32.Trojan.Bingoml.Wpti
Ad-Aware	Gen:Variant.Razy.871950
Sophos	Mal/Generic-S
BitDefenderTheta	AI:Packer.261573B11F
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R03FC0PH121
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.qh
FireEye	Gen:Variant.Razy.871950
Emsisoft	Gen:Variant.Razy.871950 (B)
Jiangmin	Trojan.Bingoml.ayu
Avira	TR/Redcap.rgiyp
ZoneAlarm	Trojan.Win32.Bingoml.cbza
GData	Win32.Application.PUPStudio.A
McAfee	Trojan-FPEY!62E275D1C4B7
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Wacatac
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R03FC0PH121
Yandex	Trojan.Bingoml!hxyGqQgduF0
Ikarus	Trojan.SuspectCRC
MaxSecure	Dropper.Dinwod.frindll
Fortinet	W32/CoinMiner.BBYK!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml