Malware

Ser.Razy.5755 removal

Malware Removal

The Ser.Razy.5755 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ser.Razy.5755 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
hatrak3.no-ip.biz

How to determine Ser.Razy.5755?


File Info:

crc32: 453DCF03
md5: 59626588569e9b0ee7b2cd7d1211b6f2
name: 59626588569E9B0EE7B2CD7D1211B6F2.mlw
sha1: 75afeb78c058d48c4a8316725d733f6573177e58
sha256: f89f607efa982a291d356d78db4b001a5f37230d3d6f95e416f5de90000f9d0f
sha512: 54159a5bfdbd7be9f5a881cb47c0cab54b8c928944045b2116c2f3f4ea6e648baf77147ba9e421086ef9e024d19e3c00e7187bd21d25c9f1eb1c070a4612a2f3
ssdeep: 3072:wgp4W42MpyXNx39VO03yW9iRpJYKYS9nBSSj+tRzEzAv:41tyXv39VDIMk9n3+tRY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: b5ygp2ma.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: b5ygp2ma.exe

Ser.Razy.5755 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.DownLoader9.15911
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0055e39a1 )
BitDefenderGen:Variant.Ser.Razy.5755
K7GWTrojan ( 0055e39a1 )
Cybereasonmalicious.8569e9
BitDefenderThetaGen:NN.ZemsilF.34804.mm0@aCmkIFj
CyrenW32/Ransom.AY.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
NANO-AntivirusTrojan.Win32.Inject.cilgjp
RisingBackdoor.Bladabindi!8.B1F (CLOUD)
SophosMal/Generic-S
ComodoMalware@#1hib87iyk1gwu
F-SecureTrojan.TR/Dropper.MSIL.Gen
McAfee-GW-EditionBehavesLike.Win32.Generic.dm
IkarusTrojan-Downloader
JiangminTrojan.AntiAV.oo
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/MSIL.Disfa
KingsoftWin32.Troj.Disfa.cl.(kcloud)
ArcabitTrojan.Ser.Razy.D167B
ZoneAlarmTrojan.Win32.AntiAV.cket
MicrosoftBackdoor:MSIL/Bladabindi
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/MSILKrypt14.Exp
Acronissuspicious
McAfeeArtemis!59626588569E
VBA32Trojan.MSIL.Disfa
PandaGeneric Malware
ESET-NOD32a variant of MSIL/Injector.ECE
TencentMsil.Trojan.Disfa.Swkw
YandexTrojan.Disfa!Ks5Ezuoms6Q
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Disfa.CLNV!tr
AVGMSIL:GenMalicious-AOI [Trj]
AvastMSIL:GenMalicious-AOI [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/Malware.QVM03.Gen

How to remove Ser.Razy.5755?

Ser.Razy.5755 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment