Win32/TrojanDownloader.Agent.OVC removal

The Win32/TrojanDownloader.Agent.OVC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Agent.OVC virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/TrojanDownloader.Agent.OVC?


File Info:
name: 21A5C854EB666DFBDAB6.mlw
path: /opt/CAPEv2/storage/binaries/5307b4569e759f81acf2941d7863c9b8f0ab53e08cd19ead2416569913060b58
crc32: 267749B4
md5: 21a5c854eb666dfbdab672840e1465ec
sha1: 0703e5839d39a5bcea308e78eddeb0589f195298
sha256: 5307b4569e759f81acf2941d7863c9b8f0ab53e08cd19ead2416569913060b58
sha512: 59546452fbdc03cc8930590a331e3ecbefcda1ea89e57118079915a54cbed845bcbc38380c2d47de5c9783ac92cd58b51a9ab8d70641d1c51861faf01ba3aae8
ssdeep: 384:TfyvFbiA4M8k9IHL+XoFlLZWtj15JSfy:LyvF2HM0L+o0tjnJSy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D5158667468E551AF92804BE859BC1B748063D740D2A5FE7AFC2D945863F9BBCE20F03
sha3_384: 5da28a32511ef99380e909de340306c673cb854e348784bc28ab28018895f5517d87b792d81c85c166395148ac6dc08d
ep_bytes: 0000408b450850ff15145040008945f8
timestamp: 2007-02-02 06:04:38

Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.OVC also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad3.22339
FireEye	Generic.mg.21a5c854eb666dfb
McAfee	Artemis!21A5C854EB66
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Cyren	W32/Parasitic-Fileinfector-base
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.OVC
Zoner	Probably Heur.ExeHeaderL
ClamAV	Win.Downloader.68875-1
Kaspersky	UDS:DangerousObject.Multi.Generic
Avast	Win32:Trojan-gen
Rising	Win32.Agent.gm (CLASSIC)
Comodo	MalCrypt.Indus!@1qrzi1
McAfee-GW-Edition	BehavesLike.Win32.Infected.dz
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
VBA32	suspected of Trojan.Downloader.gen
Malwarebytes	Malware.Heuristic.1003
APEX	Malicious
Yandex	Win32.DownAgent.Gen
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.w
AVG	Win32:Trojan-gen
Cybereason	malicious.39d39a
Panda	Generic Suspicious

How to remove Win32/TrojanDownloader.Agent.OVC?

Win32/TrojanDownloader.Agent.OVC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X