Trojan.Win32.Ekstak.akwvd removal instruction

The Trojan.Win32.Ekstak.akwvd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Ekstak.akwvd virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Likely virus infection of existing system binary

How to determine Trojan.Win32.Ekstak.akwvd?

File Info:
name: 3074972F22BDAED933BB.mlw
path: /opt/CAPEv2/storage/binaries/6cfa4c5d3397e9f1c2ea69f97523c9832237ddf44fa27e5083b184bafc65cc22
crc32: 20220DBC
md5: 3074972f22bdaed933bbebf7efc35380
sha1: f9bb87b11f780bf630fdadbd9e7b93427ce01e1c
sha256: 6cfa4c5d3397e9f1c2ea69f97523c9832237ddf44fa27e5083b184bafc65cc22
sha512: 831e1f793b9a5116800c4e6e6673503498cafec8cfaffb71dd5be6e337b99fd47f792103f7cfc54aad006b3180d077ab939f3c1d634181276a02a0bbba79c582
ssdeep: 98304:VN5yas8ag6H26/qt7iWMVIQmRDVEm02OvCpVZg5G9e2L3G:P5yas8at2M9WMkhVnqC/C5G9eR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10036338E8D14B7EAF56DD1F74D32825007212F86E73A4AB9A01CB8DCB539551C32FB62
sha3_384: 4a6ac033c88ea097a5c69f8476dfc8e9541c4e16d4ee3bb055c60ca150041bb11326962a9d330ef6820d0eea948a96aa
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Data Doctor Pvt. Ltd.                                       
FileDescription: DR (Professional) Recovery - Demo Setup                     
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Ekstak.akwvd also known as:

How to remove Trojan.Win32.Ekstak.akwvd?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.