Trojan

Trojan.OVLCrypt.Generic removal

Malware Removal

The Trojan.OVLCrypt.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.OVLCrypt.Generic virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Trojan.OVLCrypt.Generic?


File Info:

name: B10D9EA1234FCDD0B14C.mlw
path: /opt/CAPEv2/storage/binaries/2a27b7df5dd63e326d42415f4e9d33417235df8aa365e007bcddaaabee9b30be
crc32: 3E3AD773
md5: b10d9ea1234fcdd0b14ca3d0c637a61d
sha1: eb5f18501c54553cd8b57b152268e577efc0ed8c
sha256: 2a27b7df5dd63e326d42415f4e9d33417235df8aa365e007bcddaaabee9b30be
sha512: 65cbbcc11ff6e37ca2707b1f8922136f09980c037020d6e293ac44074b667967bd0b68aa79b82a71b99113adefd7285b82cd6f117b48224ed43798647d45e933
ssdeep: 1536:RCQ2XdKINgJtHtkzQmwyHTfizC5Cwi8My3Q7IM399CvLkz6Ya:RCQOdKINgJKhiCiC3QUMNMvAz6Ya
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AD93020A6BC219B3C3D5A0F3174A58AA65BD91F50B4DD9A620FD803C0327DBB177E6C9
sha3_384: 0247f479e7a7b68773bbb070408d14f663e414fedbbae9b6d44908a554bdd08da1475d65311bc5e385934055835688da
ep_bytes: b90000000083ec0489342481e851d42f
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Trojan.OVLCrypt.Generic also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Zusy.507916
ClamAVWin.Packed.Zusy-10016366-0
FireEyeGeneric.mg.b10d9ea1234fcdd0
SkyhighBehavesLike.Win32.Generic.nc
McAfeeGlupteba-FUBP!B10D9EA1234F
MalwarebytesTrojan.OVLCrypt.Generic
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005304e81 )
K7GWTrojan ( 005304e81 )
Cybereasonmalicious.01c545
BitDefenderThetaGen:NN.ZexaCO.36680.fCX@ayNqACe
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HTAQ
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Zusy.507916
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Evo-gen [Trj]
RisingTrojan.Kryptik!1.D12D (CLASSIC)
SophosML/PE-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.Siggen25.3481
VIPREGen:Variant.Zusy.507916
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Zusy.507916 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Zusy.507916
GoogleDetected
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.Kryptik
Kingsoftmalware.kb.a.1000
ArcabitTrojan.Zusy.D7C00C
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
MicrosoftTrojan:Win32/Wacatac.B!ml
VaristW32/Injector.BKX.gen!Eldorado
VBA32BScope.Trojan.Wacatac
ALYacGen:Variant.Zusy.507916
Cylanceunsafe
YandexTrojan.Copak!xAimz0r5O20
IkarusTrojan.Win32.Injector
FortinetW32/Injector.DZQA!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.OVLCrypt.Generic?

Trojan.OVLCrypt.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment