Trojan

Trojan.Win32.Ekstak.ahnjj information

Malware Removal

The Trojan.Win32.Ekstak.ahnjj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Ekstak.ahnjj virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Ekstak.ahnjj?


File Info:

crc32: 0010D7AF
md5: 7148897a14e50a2ee008648eb3a2dd5a
name: 7148897A14E50A2EE008648EB3A2DD5A.mlw
sha1: 7e93e9c38eb0174b1e84f634d22db2a1bcf23f38
sha256: 0b842d9b7de584c4df533e7fc33ca28e1ffdb9270f4ba68816c532ab172c60b1
sha512: 9e7c1289ecacf5f7ae77f54a66aac9703406f6366cb67c317d5f8e3adae9d4a118fde4c2846c088e734d2d1a75d4bf396189f6aa589254c146720a623921c0d7
ssdeep: 196608:X3odl47j9CJhjMRuZTx2LQItPB4oWRuV87TJC354lpf/XpBuy7Oq/KWwyr3K:XYgCJBbWpZ4R4GxCmpf/XpBuAOiDK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion: 1.1.0.0
CompanyName: pasoft
Comments: This installation was built with Inno Setup.
ProductName: IrtualDVW
ProductVersion: 1.1.0.0
FileDescription: http://www.yburn.com
Translation: 0x0000 0x04b0

Trojan.Win32.Ekstak.ahnjj also known as:

K7AntiVirusTrojan ( 005722fe1 )
LionicTrojan.Win32.Ekstak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Zadved.1661
CylanceUnsafe
SangforTrojan.Win32.Ekstak.ahnjj
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDropper:Win32/Ekstak.4a8b889d
K7GWTrojan ( 005722fe1 )
CyrenW32/Trojan.RUAD-0507
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
KasperskyTrojan.Win32.Ekstak.ahnjj
TencentWin32.Trojan.Ekstak.Aenw
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.BadFile.wc
JiangminTrojan.Ekstak.bnov
AviraHEUR/AGEN.1140093
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3PUP/Win32.DownloadAssistant.R357009
McAfeeArtemis!7148897A14E5
MalwarebytesAdware.DownloadAssistant
IkarusTrojan-Dropper.Win32.Agent
MaxSecureTrojan.Malware.110354160.susgen
FortinetW32/Agent.SLC!tr
AVGWin32:AdwareX-gen [Adw]

How to remove Trojan.Win32.Ekstak.ahnjj?

Trojan.Win32.Ekstak.ahnjj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment