About “Razy.859527” infection

The Razy.859527 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Razy.859527 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Razy.859527?


File Info:
crc32: ED180051
md5: ab29b9e225a05bd17e919e1d0587289e
name: AB29B9E225A05BD17E919E1D0587289E.mlw
sha1: 8494df50ba9f18461b5abe7ee896a68f2422d2aa
sha256: ae013d2935b9520c834b39e24e0123421edf9c518665f199480ecc2a78d9a8d3
sha512: 00e7d43181fc7d268372bd5dfb587295698a8d30b8842959d047d95f7ce57fef38b605336e364e9689f0cb06c28a2e9a7d22ccbdf5fa88ed8fbc496f6b72a3c7
ssdeep: 384:3Z1SRTr1ADTsDBm0A1TWx45t8W/jJGfZb8ZpHSGAp9E+qFHgomg:J1+r1Qg3q7ebiRGp9E+AAomg
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: DUMPREP.EXE
FileVersion: 5.1.2600.5512 (xpsp.080413-2108)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.1.2600.5512
FileDescription: Windows Error Reporting Dump Reporting Tool
OriginalFilename: DUMPREP.EXE
Translation: 0x0409 0x04b0

Razy.859527 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen13.4445
CAT-QuickHeal	Trojan.Razy
ALYac	Gen:Variant.Razy.859527
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1968834
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.93484517
K7GW	Trojan ( 0057a8f31 )
K7AntiVirus	Trojan ( 0057a8f31 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Agent.ACXX
Avast	Win32:Trojan-gen
BitDefender	Gen:Variant.Razy.859527
MicroWorld-eScan	Gen:Variant.Razy.859527
Ad-Aware	Gen:Variant.Razy.859527
Sophos	Mal/Generic-S + Mal/BadCert-Gen
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Generic trojan.lz
FireEye	Gen:Variant.Razy.859527
Emsisoft	MalCert.A (A)
Webroot	W32.Trojan.Gen
Avira	TR/Agent.xdmur
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Razy.DD1D87
GData	Gen:Variant.Razy.859527
AhnLab-V3	Backdoor/Win.CobaltStrike.R416024
McAfee	Artemis!AB29B9E225A0
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R011C0PDF21
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.116793962.susgen
Fortinet	W32/Agent.ACXX!tr
AVG	Win32:Trojan-gen
Qihoo-360	Win32/Trojan.Generic.HgkASSkA

How to remove Razy.859527?

Razy.859527 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X