Razy.892600 (file analysis)

The Razy.892600 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.892600 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.892600?


File Info:
crc32: 07E6FCC0
md5: 7fb3aaf58328ae011bebff3f12a13fea
name: 7FB3AAF58328AE011BEBFF3F12A13FEA.mlw
sha1: c7b819f97655dacfe5693df3c40f09c5afedf74f
sha256: e1e293cbd9c3deeabfdea61324e45217067414499d34ab8c6add548bb8c926ec
sha512: c1d64d6fb775decbec2ebad571ff53a479637f466cdf7abd0c21141170374d519e848ebf514e0f5b3a7b4b3cb422c7918159d7800904ca7442e9b2dc3a533f2f
ssdeep: 1536:g7x0PQWcBJgtp4OqCn5VqYJHD9u583kAEJhyCuv0q614eep5CrBG9YrtEc727AP:AJvBml54cHDfEuv0q62eepkdGl8Gl/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Dieters7
FileVersion: 1.00
CompanyName: GFI Software
Comments: GFI Software
ProductName: GFI Software
ProductVersion: 1.00
FileDescription: GFI Software
OriginalFilename: Dieters7.exe

Razy.892600 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Mucc.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Razy.892600
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Win32/Injector.30736215
Cyren	W32/VBKrypt.AWZ.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EPSX
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Mucc.ozj
BitDefender	Gen:Variant.Razy.892600
MicroWorld-eScan	Gen:Variant.Razy.892600
Ad-Aware	Gen:Variant.Razy.892600
BitDefenderTheta	Gen:NN.ZevbaF.34796.om0@ayvljGbi
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dh
FireEye	Gen:Variant.Razy.892600
Emsisoft	Gen:Variant.Razy.892600 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Razy.892600
AhnLab-V3	Trojan/Win.Infostealer.C4550331
McAfee	Artemis!7FB3AAF58328
MAX	malware (ai score=80)
TrendMicro-HouseCall	TROJ_GEN.F0D1C00GD21
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/EPSX!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwMAj78A

How to remove Razy.892600?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Razy.892600 (file analysis)