What is "Razy.928020 (B)"?

The Razy.928020 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Razy.928020 (B) virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Collects information about installed applications
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Razy.928020 (B)?


File Info:
crc32: BD140C21
md5: a5513cadb437d6243dc463d836a03e62
name: A5513CADB437D6243DC463D836A03E62.mlw
sha1: a16e4767112e43f150a255cad6c56d440d945380
sha256: 6232728af29302ef0a4675b3c5a255b5e9ee800c221823ecb4d4cab8cc0f7edb
sha512: d31cca6691b5d06e2d21e56bf4ec8e087fff6d153f0fa80cd669ed6517ce4dae3813c8771e4cabdeb57a2491fa45a5d8ecd4e048e1dcfa64d738fd8bf042cbb2
ssdeep: 6144:ZXK6cyPiWCgknQ/HuyIzuTVzsMM56519p+6yTx3NJsQOe3MnjWRza5GZa:JM+ZdkmHubeaCo6CspCMC5aAa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyrightxa9 2005-2015
InternalName: 
FileVersion: 5.0.2.2
CompanyName: IObit
LegalTrademarks: 
Comments: 
ProductName: Unikstall History
ProductVersion: 1.0.5.1
FileDescription: IObit Unikstaller 5
OriginalFilename: 
Translation: 0x0804 0x03a8

Razy.928020 (B) also known as:

Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.928020
Cylance	Unsafe
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.7112e4
Cyren	W32/Kryptik.FHO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HMIU
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	UDS:Trojan-Downloader.Win32.Cridex
BitDefender	Gen:Variant.Razy.928020
MicroWorld-eScan	Gen:Variant.Razy.928020
Ad-Aware	Gen:Variant.Razy.928020
Sophos	ML/PE-A + Mal/EncPk-APV
BitDefenderTheta	Gen:NN.ZexaF.34142.3u0@aKX12!ib
McAfee-GW-Edition	BehavesLike.Win32.BadFile.ct
FireEye	Generic.mg.a5513cadb437d624
Emsisoft	Gen:Variant.Razy.928020 (B)
Avira	TR/AD.Dridex.slbcv
Antiy-AVL	Trojan/Generic.ASMalwS.1650A5
Microsoft	Trojan:Win32/Dridex!ml
GData	Gen:Variant.Razy.928020
AhnLab-V3	Trojan/Win.Generic.R442075
Acronis	suspicious
McAfee	GenericRXAA-AA!A5513CADB437
MAX	malware (ai score=82)
VBA32	BScope.TrojanDownloader.Cridex
Malwarebytes	Malware.AI.3474984638
Panda	Trj/Genetic.gen
Rising	Trojan.Kryptik!1.D606 (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/EncPk.APV!tr
AVG	Win32:Trojan-gen

How to remove Razy.928020 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Razy.928020 (B)”?