Trojan

What is “Ole.Trojan.A1026217”?

Malware Removal

The Ole.Trojan.A1026217 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ole.Trojan.A1026217 virus can do?

  • A potential decoy document was displayed to the user
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Ole.Trojan.A1026217?


File Info:

crc32: D776EE09
md5: 43dcaefd31def78f9d5b8aa70aa703a5
name: upload_file
sha1: 135762202dd6af46e27ed330916f2592a0d97496
sha256: 0ce691ae2caab090785a0378e42e72fb8c1b6e129c8b3f50e32462295cf128e3
sha512: 57e09fcf9d563ff463bc22123af17c1df3cdd596fcead9294162f7f8eccfe2fc0a4ab750bf60a2b9bd80e63cc80157b40198acb2e0b9c6682bf941dffaf22ed0
ssdeep: 3072:2BeY5kb0TUNAuBqVPlB11nBkynwsYv/Pw+RhPr:2EYOb0TUquBqt7nBD03PRRhPr
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Omnis., Author: Ines Brunet, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Wed Oct 14 20:03:00 2020, Last Saved Time/Date: Wed Oct 14 20:03:00 2020, Number of Pages: 1, Number of Words: 2017, Number of Characters: 11502, Security: 8

Version Info:

0: [No Data]

Ole.Trojan.A1026217 also known as:

Elasticmalicious (high confidence)
DrWebExploit.Siggen2.49155
MicroWorld-eScanW97m.Downloader.IYY
FireEyeW97m.Downloader.IYY
CAT-QuickHealOle.Trojan.A1026217
McAfeeW97M/Downloader.dgk
AegisLabTrojan.MSWord.Generic.4!c
K7AntiVirusTrojan ( 005703b31 )
K7GWTrojan ( 005703b31 )
InvinceaMal/DocDl-K
CyrenW97M/Downldr.IE.gen!Eldorado
SymantecW97M.Downloader
TrendMicro-HouseCallTrojan.W97M.EMOTET.SMBA
ClamAVDoc.Malware.Emotet-9777973-1
KasperskyHEUR:Trojan.MSOffice.SAgent.gen
BitDefenderW97m.Downloader.IYY
ViRobotDOC.Z.Agent.137447.B
RisingDownloader.Agent/VBA!1.CD84 (CLASSIC)
Ad-AwareW97m.Downloader.IYY
SophosMal/DocDl-K
ComodoMalware@#v6gyjbj01lli
F-SecureMalware.W97M/Agent.4371612
TrendMicroTrojan.W97M.EMOTET.SMBA
McAfee-GW-EditionW97M/Downloader.dgk
EmsisoftTrojan-Downloader.Macro.Generic.BW (A)
SentinelOneDFI – Malicious OLE
AviraW97M/Agent.4371612
MicrosoftTrojanDownloader:O97M/Emotet.PEE!MTB
ArcabitW97m.Downloader.IYY
ZoneAlarmHEUR:Trojan.MSOffice.SAgent.gen
GDataMacro.Trojan-Downloader.Agent.AVL
CynetMalicious (score: 85)
AhnLab-V3Downloader/DOC.Emotet.S1304
VBA32TrojanDownloader.O97M.Emotet.CSK
ALYacTrojan.Downloader.DOC.Gen
ESET-NOD32VBA/TrojanDownloader.Agent.UFY
TencentHeur.Macro.Generic.h.1aafba76
IkarusTrojan-Downloader.VBA.Emotet
FortinetVBA/Agent.AVL!tr
Qihoo-360virus.office.qexvmc.1085

How to remove Ole.Trojan.A1026217?

Ole.Trojan.A1026217 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment