How to remove “Trojan.Dropper.Agent.OA”?

The Trojan.Dropper.Agent.OA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Dropper.Agent.OA virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary file triggered YARA rule

How to determine Trojan.Dropper.Agent.OA?


File Info:
name: EC7D0C681591E75A86A5.mlw
path: /opt/CAPEv2/storage/binaries/6484ae6bc36529a87c2da7d483b141ae88d4d289d8c53f6dfb0e5eddbdecd995
crc32: DB09E5B9
md5: ec7d0c681591e75a86a5f2bc954d006a
sha1: 600d5d49c64d0051f9804a12300f26c44c0b9d1d
sha256: 6484ae6bc36529a87c2da7d483b141ae88d4d289d8c53f6dfb0e5eddbdecd995
sha512: 6db921c3b3b86b6091a63a84f948b179acdcd1f03464b27570ee3944b1853ec6124bf1635a6b3cc0e3ed9e1456a8da284d9fbedbd46b437f051da2c39ca8209f
ssdeep: 49152:vqrNUvL6RQRYYKQaf5DOs3Hl8MD/NmRyui8TQpmYP+t+NJXt8vQVEL:vqrNymx3Hl8MTNmKpmYP+t+NJXtFEL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F06E102E690807AE18901F251B3133A6B35AE1103119ACB5BB8FED57F365E17F3A75B
sha3_384: 18579bf8060430a4d7c6735b90ae15845f516a09daf38e1190bb4fea2d5e83d58cb0f175e8d97a2536e54ff618d3dcbe
ep_bytes: 558bec6aff68a8d140006848b4400064
timestamp: 2005-06-14 22:53:00

Version Info:
0: [No Data]

Trojan.Dropper.Agent.OA also known as:

Lionic	Trojan.Win32.ServU.b!c
AVG	Win32:PUP-gen [PUP]
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Dropper.Agent.OA
FireEye	Trojan.Dropper.Agent.OA
Skyhigh	BehavesLike.Win32.Generic.wc
McAfee	Artemis!EC7D0C681591
Malwarebytes	Floxif.Virus.FileInfector.DDS
Zillya	Dropper.Agent.Win32.6930
Sangfor	Dropper.Win32.Agent.Vupk
K7AntiVirus	Trojan ( 0055e3df1 )
Alibaba	TrojanDropper:Win32/Bdoor.672e240e
K7GW	Trojan ( 0055e3df1 )
Cybereason	malicious.81591e
Symantec	Trojan Horse
ESET-NOD32	Win32/TrojanDropper.Agent.OA
Cynet	Malicious (score: 100)
ClamAV	Win.Trojan.Servu-52
Kaspersky	Trojan-Dropper.Win32.Agent.oa
BitDefender	Trojan.Dropper.Agent.OA
NANO-Antivirus	Trojan.Win32.Jord.dyqfzx
Avast	Win32:PUP-gen [PUP]
Tencent	Win32.Trojan-Dropper.Agent.Qgil
Sophos	Mal/Behav-214
F-Secure	Backdoor.BDS/Iroffer.1227
DrWeb	BackDoor.Servu.4103
VIPRE	Trojan.Dropper.Agent.OA
TrendMicro	TROJ_GEN.R002C0DC824
Emsisoft	Trojan.Dropper.Agent.OA (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDropper.Agent.dne
Webroot	W32.Trojan.Backdoor-Serv-U
Avira	BDS/ServU-based.2
Antiy-AVL	Trojan[Dropper]/Win32.Agent
Kingsoft	Win32.Troj.Undef.a
Microsoft	Trojan:Win32/Vigorf.A
Xcitium	TrojWare.Win32.TrojanDropper.Agent.OA@amcs
Arcabit	Trojan.Dropper.Agent.OA
ZoneAlarm	Trojan-Dropper.Win32.Agent.oa
GData	Trojan.Dropper.Agent.OA
Varist	W32/Trojan.SFAA-8483
AhnLab-V3	Dropper/Win32.Agent.C84549
VBA32	Trojan.Genome.os
ALYac	Trojan.Dropper.Agent.OA
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0DC824
Rising	Trojan.Pakes.pt (CLOUD)
Yandex	Trojan.GenAsa!YGJK1AThVJQ
Ikarus	Generic.ServU
MaxSecure	Trojan.Malware.1170193.susgen
Fortinet	W32/Agent.OA!dam
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)
alibabacloud	Trojan[dropper]:Win/Agent.OA

How to remove Trojan.Dropper.Agent.OA?

Trojan.Dropper.Agent.OA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X