Categories: Malware

About “Generik.EKLTMKI” infection

The Generik.EKLTMKI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.EKLTMKI virus can do?

Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Generik.EKLTMKI?


File Info:
crc32: 9CC606E2md5: 57073c95cb15e39905927c1cc8b440ecname: 57073C95CB15E39905927C1CC8B440EC.mlwsha1: 661c34140efe716c8f20c61340bb600bbaae286asha256: b724f1443c227d09932c99b13fe2e2e6b2be40618aeb8926dad8cfc7571d186asha512: 8ec599f90932589951cd293590264b26c524256b063f28161ef80476bac5f853c10bdfe8fd8dba26837344a9c0583bb8b1e9d8e4c8ad2874ce668764ce9847b1ssdeep: 96:EaZd9w/IoxrmwOyzhOnmtjuD79DWl8A4bKKmVLl+bcV/pt88nyAgzNt:EaZd9w/7NmwOUSYA9SRzlJc7type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: x41ax43ex43fx438x440x430x439x442Assembly Version: 1.0.0.0InternalName: start.exeFileVersion: 1.0.0.0CompanyName: x418x43cx44f x43ax43ex43cx43fx430x43dx438x438LegalTrademarks: x422x43ex432x430x440x43dx44bx439 x437x43dx430x43aComments: x41ax43ex43cx435x43dx442x430x440x438x439ProductName: x418x43cx44f x43fx440x43ex434x443x43ax442x430ProductVersion: 1.0.0.0FileDescription: x41ex43fx438x441x430x43dx438x435 x444x430x439x43bx430OriginalFilename: start.exe

Generik.EKLTMKI also known as:

Lionic	Trojan.Win32.Samas.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ransom.Samas.9
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Trojan:Application/SuspectCRC.39911088
Cybereason	malicious.5cb15e
Symantec	Trojan Horse
ESET-NOD32	a variant of Generik.EKLTMKI
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Ransom.Samas.9
NANO-Antivirus	Trojan.Win32.Ransom.ffeuam
MicroWorld-eScan	Gen:Variant.Ransom.Samas.9
Tencent	Win32.Trojan.Dropper.Stkh
Ad-Aware	Gen:Variant.Ransom.Samas.9
Sophos	Mal/Generic-S
Comodo	Malware@#13ycj2jluu9jd
BitDefenderTheta	Gen:NN.ZemsilF.34790.am0@ai!WTTc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.57073c95cb15e399
Emsisoft	Gen:Variant.Ransom.Samas.9 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Dropper.Gen
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Gen:Variant.Ransom.Samas.9
McAfee	Artemis!57073C95CB15
MAX	malware (ai score=95)
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!A3dRWNLN22E
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanDropper.Generic.HgIASRIA