How to remove “BAT/TrojanDownloader.Agent.OIW”?

The BAT/TrojanDownloader.Agent.OIW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BAT/TrojanDownloader.Agent.OIW virus can do?

The binary likely contains encrypted or compressed data.

How to determine BAT/TrojanDownloader.Agent.OIW?


File Info:
crc32: 51FBFE35
md5: aac2b6314988e0aea824fe0a53b917c1
name: AAC2B6314988E0AEA824FE0A53B917C1.mlw
sha1: 17c0d629b7a2f940e7a69f1120582cf89f70355a
sha256: 6c8e5f1670515c6a9d3cdcafe6d9a782a87f0f085095558cc0116ea73281c059
sha512: 0245fb86597e7106ef24a7348b9251fbf3936ff3643f372bea90b0c736c1275695012ce699d47c709597c1972c6a2af977507ba7378eefa5a73afeea48559715
ssdeep: 3072:4ahKyd2n31d5GWp1icKAArDZz4N9GhbkrNEkbTX2rv:4ahO1p0yN90QEr
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 11.00.19041.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.19041.1
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            
Translation: 0x0409 0x04b0

BAT/TrojanDownloader.Agent.OIW also known as:

Lionic	Trojan.Multi.Generic.4!c
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46749774
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
Cybereason	malicious.9b7a2f
Symantec	Trojan.Gen.2
ESET-NOD32	BAT/TrojanDownloader.Agent.OIW
APEX	Malicious
Avast	Win64:Trojan-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.46749774
MicroWorld-eScan	Trojan.GenericKD.46749774
Ad-Aware	Trojan.GenericKD.46749774
Comodo	TrojWare.Win32.Agent.smyuv@0
TrendMicro	TROJ_FRS.VSNTH621
FireEye	Trojan.GenericKD.46749774
Emsisoft	Trojan.GenericKD.46749774 (B)
Webroot	W32.Trojan.Gen
Microsoft	Program:Win32/Wacapew.C!ml
GData	Trojan.GenericKD.46749774
AhnLab-V3	Malware/Win64.Generic.C4286717
McAfee	RDN/ZLoader
MAX	malware (ai score=85)
TrendMicro-HouseCall	TROJ_FRS.VSNTH621
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	BAT/Agent.OIW!tr.dldr
AVG	Win64:Trojan-gen
Paloalto	generic.ml

How to remove BAT/TrojanDownloader.Agent.OIW?

BAT/TrojanDownloader.Agent.OIW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X