What is “Win32/Agent.UOU”?

The Win32/Agent.UOU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.UOU virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Win32/Agent.UOU?


File Info:
name: 0D3F2FC4ADC8A5CA4DCD.mlw
path: /opt/CAPEv2/storage/binaries/2bac24a519283f5817d0b21a2add41307e3c826c17a5eabe161fc1f4478e8115
crc32: D0BF61B0
md5: 0d3f2fc4adc8a5ca4dcd32602e274f22
sha1: f2269207684c89f22805908fd261721c0a9097c6
sha256: 2bac24a519283f5817d0b21a2add41307e3c826c17a5eabe161fc1f4478e8115
sha512: a8bdf7937103986e73ad806afc00a1911121ba0b784d948e9567d227d9786b40d7d63fb59076f403edf2b04a479fbcc3a88543fc72766d2480a841edac010f22
ssdeep: 12288:80/rWTpcPir7lzl43TTNIvvmv/8iuX1hY8iOhE/KfdSnsNWt:WTiPk7oTTOc/8iuDiOW//0W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CBA49D2235B2C032D5A242704C7DEB6564AEBC344F715ADB73D41A3E9E702D3AB31E66
sha3_384: c8715cf6f29fe2275f117473b0ff83e2221c73e7c7be54974bfe55513ce5557efc82c466e547616ae9a4a9858d6503e1
ep_bytes: e83f080000e97afeffff8b4df464890d
timestamp: 2021-02-07 14:44:22

Version Info:
0: [No Data]

Win32/Agent.UOU also known as:

Lionic	Trojan.Win32.Mikey.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Mikey.112110
FireEye	Generic.mg.0d3f2fc4adc8a5ca
McAfee	GenericRXAA-AA!0D3F2FC4ADC8
K7AntiVirus	Unwanted-Program ( 0056a5271 )
Alibaba	Trojan:Win32/Generic.7dcc4342
K7GW	Unwanted-Program ( 0056a5271 )
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of Win32/Agent.UOU
APEX	Malicious
BitDefender	Gen:Variant.Mikey.112110
Tencent	Malware.Win32.Gencirc.11b9ec34
Ad-Aware	Gen:Variant.Mikey.112110
Sophos	Mal/Generic-S
Zillya	Tool.NetPass.Win32.7900
McAfee-GW-Edition	BehavesLike.Win32.Trojan.gh
Emsisoft	Gen:Variant.Mikey.112110 (B)
Ikarus	Trojan.Win32.Agent
GData	Gen:Variant.Mikey.112110
Jiangmin	TrojanDownloader.Delf.auad
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Mikey.D1B5EE
ViRobot	Trojan.Win32.Z.Mikey.453808
Microsoft	Trojan:Win32/Woreflint.A!cl
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Mikey.112110
MAX	malware (ai score=80)
VBA32	BScope.Trojan.Infospy
TrendMicro-HouseCall	TROJ_GEN.R002H09L721
Rising	Trojan.Generic@ML.92 (RDML:rfE66zYI3a2DF2A/0CSMIw)
Yandex	Trojan.Agent!iBtdDmhjLI8
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Agent.UOU!tr
Cybereason	malicious.4adc8a
Panda	Trj/Genetic.gen

How to remove Win32/Agent.UOU?

Win32/Agent.UOU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X