How to remove “Win32:Downloader-OPN [Trj]”?

The Win32:Downloader-OPN [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Downloader-OPN [Trj] virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:Downloader-OPN [Trj]?


File Info:
name: 4790BA576C7EB3CDB666.mlw
path: /opt/CAPEv2/storage/binaries/2e0ebacc000745651f972b29ce4bfd001f9854ac660b2098252119b4e732cda3
crc32: 42E8FFA9
md5: 4790ba576c7eb3cdb66667ee84c39504
sha1: fcbcd79a58efff336d78bb7f614fa229c7fd922f
sha256: 2e0ebacc000745651f972b29ce4bfd001f9854ac660b2098252119b4e732cda3
sha512: 35d5c96e57b89e45474be65c0d3c2889ac5ba83ec0fa0f55ff992a63876fb7d6dad26980ea703fab6b9b559b8eda6c371d95862cbbbe4203968c8549861e7bb0
ssdeep: 6144:zpoxOK9DFeh2c/Yatw31Fz0p2dyxwxMMr1xsAgqiRlKTG55GTfnYa/tTKiWCDGuB:jPTaPTxUmO4mi8fmVDNth7awy8MGJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10CC40935E6247A2BF422A0F5629E9AA64018AD30331457C7FBC54F9970F50E2973BF1B
sha3_384: 58f5532424ab61252c312ed1cb7b5d3aba5ffd3adbd81dc48abb5ca7351915b0fc738665c70ff1012a7212506ac3b0ef
ep_bytes: e892040000e936fdffff8bff558bec81
timestamp: 2012-05-18 19:08:13

Version Info:
Comments:                                                                                                                                                                                                                                                               
CompanyName: Microsoft Corporation
FileDescription: Performance Log Utility
FileVersion: 6.1.7600.16385
InternalName: Logman.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks: © Microsoft Corporation. All rights reserved.
OriginalFilename: Logman.exe.mui
PrivateBuild: Logman.exe.mui
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.1.7600.16385
SpecialBuild: 6.1.7600.16385
Translation: 0x0409 0x04b0

Win32:Downloader-OPN [Trj] also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Jorik.lCcB
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Skyhigh	BehavesLike.Win32.Mutopy.hh
McAfee	Mutopy-BAB!4790BA576C7E
Malwarebytes	Rodecap.Trojan.Downloader.DDS
Zillya	Trojan.Generic.Win32.255129
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0053c3c71 )
Alibaba	Malware:Win32/km_2c6b8.None
K7GW	Trojan ( 0053c3c71 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Generic.D2CB0E4D
Symantec	Trojan.Gen.MBT
ClamAV	Win.Trojan.Multi-6413508-0
BitDefender	Trojan.GenericKD.46861901
MicroWorld-eScan	Trojan.GenericKD.46861901
Avast	Win32:Downloader-OPN [Trj]
Tencent	Malware.Win32.Gencirc.13b1a772
Emsisoft	Trojan.GenericKD.46861901 (B)
F-Secure	Trojan.TR/Kazy.34213.jh
DrWeb	Trojan.DownLoader6.10883
VIPRE	Trojan.GenericKD.46861901
TrendMicro	TROJ_MUTOPY.SMYN
FireEye	Trojan.GenericKD.46861901
Sophos	Troj/Dapato-A
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	TR/Kazy.34213.jh
Antiy-AVL	Trojan/Win32.AGeneric
Xcitium	TrojWare.Win32.Downloader.Jorik.AO@4mxqf9
Microsoft	Trojan:Win32/Mutopy.A
GData	Trojan.GenericKD.46861901
Varist	W32/Troj_Obfusc.AI.gen!Eldorado
AhnLab-V3	Trojan/Win32.HDC.C53646
ALYac	Trojan.GenericKD.46861901
MAX	malware (ai score=86)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_MUTOPY.SMYN
Rising	Trojan.Mutopy!1.9D89 (CLASSIC)
Ikarus	Trojan.Win32.Jorik
Fortinet	W32/Dapato.A!tr
AVG	Win32:Downloader-OPN [Trj]
DeepInstinct	MALICIOUS

How to remove Win32:Downloader-OPN [Trj]?

Win32:Downloader-OPN [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X