BScope.Trojan.Ekstak information

The BScope.Trojan.Ekstak is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.Trojan.Ekstak virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Checks for the presence of known windows from debuggers and forensic tools
Attempts to identify installed AV products by installation directory
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

ip-api.com

gfile04.top

How to determine BScope.Trojan.Ekstak?


File Info:
crc32: 04F32760
md5: e5ea7aa73c8ff4ce03b9f13ab464261e
name: 6.exe
sha1: b8052bb6a4408e5c651e8f5fc9763ea3ad93dddf
sha256: 57322806d9dc1437a2491cac599aa2df5028184e3deec9d9c45c6b4d003b0132
sha512: 5c168b5a1d13fc633249cb047785ee0dbe547e85e23b92b09ad441df3e774d546b525290565ba06e7779aca205128ee2549007abb7177919cae4ffd899b1ec74
ssdeep: 49152:Amy/zAeebFLIkySayMsQIIelxduk73UyKy0PAwI4tq7S32:SeBLIkySayMrIIIxdz3rfAIO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Kurt Zimmermann xa9 2019
InternalName: Installer
FileVersion: 1.0.0.2
CompanyName: Kurt Zimmermann
PrivateBuild: 001
LegalTrademarks: Kurt Zimmermann
ProductName: Kurt Zimmermann
ProductVersion: 1.0.0.2
FileDescription: Installer
OriginalFilename: Installer.exe
Translation: 0x0409 0x04b0

BScope.Trojan.Ekstak also known as:

Bkav	W32.HfsAutoB.
FireEye	Generic.mg.e5ea7aa73c8ff4ce
Qihoo-360	Win32/Virus.Adware.b51
McAfee	Artemis!E5EA7AA73C8F
Cylance	Unsafe
AegisLab	Adware.Win32.Generic.2!c
Sangfor	Malware
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Trojan ( 005663631 )
K7AntiVirus	Trojan ( 005663631 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.Themida.HLN
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
Alibaba	Packed:Win32/Themida.c6e24424
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Endgame	malicious (high confidence)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Fortinet	Adware/Generic
Trapmine	malicious.moderate.ml.score
Sophos	Generic PUA LI (PUA)
Ikarus	Win32.Outbreak
Webroot	W32.Trojan.Gen
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
Microsoft	Trojan:Win32/Occamy.C57
Acronis	suspicious
VBA32	BScope.Trojan.Ekstak
Tencent	Win32.Adware.Generic.Ammc
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_97%
BitDefenderTheta	Gen:NN.ZexaF.34128.FQ0@aOr0QHai
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.73c8ff
Paloalto	generic.ml
MaxSecure	Trojan.Malware.300983.susgen

How to remove BScope.Trojan.Ekstak?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

BScope.Trojan.Ekstak information