Trojan.Win32.Reconyc.ohpd malicious file

The Trojan.Win32.Reconyc.ohpd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Reconyc.ohpd virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Reconyc.ohpd?


File Info:
crc32: 5F88350A
md5: 5ae84753b0b91468b903df5c280ec446
name: 5AE84753B0B91468B903DF5C280EC446.mlw
sha1: 56a21137cd895ad69b976e369d358396445d1ac3
sha256: a464d407e5b10a8f3dc192b99fdcad4aaceb02f42db403c6b15ac1ea1567ef25
sha512: 2a8bbbf5e999aa4aa52ffa31a042e10ed4a0e68398f42c86b24a04a8fc566aaf02306226b8125b60525d8257030b6ce6113b4e957de3f15e44199b2a4c195f4d
ssdeep: 12288:eANwRo+mv8QD4+0V16/hcmvbr4Hx8xw0uedpWPsnVzoS2AL0e7U2t34ku6tkH0iV:eAT8QE+kkhxXCx8xuedpWPsnVzoU771+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: LGM                                                                                                 
FileDescription: LGM_Setup 1.00 Installation                                 
FileVersion: 1.00                
Comments: 
CompanyName: LGM                                                         
Translation: 0x0409 0x04e4

Trojan.Win32.Reconyc.ohpd also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Unwanted-Program ( 005617a11 )
Cynet	Malicious (score: 100)
Cylance	Unsafe
Alibaba	Trojan:Win32/Reconyc.855259a5
K7GW	Unwanted-Program ( 005617a11 )
Cybereason	malicious.7cd895
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/GameHack.BBQ potentially unsafe
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Reconyc.ohpd
NANO-Antivirus	Trojan.Win32.GameHack.ixpitm
Sophos	Mal/Generic-S (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34142.am0@aKTzLeh
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Generic.mg.5ae84753b0b91468
SentinelOne	Static AI – Malicious PE
Avira	TR/Reconyc.jccck
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win32.Generic.C4177769
McAfee	RDN/Generic.grp
VBA32	Trojan.Reconyc
Malwarebytes	Malware.AI.4161916389
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	Adware/GameHack
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan.Win32.Reconyc.ohpd?

Trojan.Win32.Reconyc.ohpd removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X