Should I remove “Trojan.Win32.Ekstak.alnft”?

The Trojan.Win32.Ekstak.alnft is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Ekstak.alnft virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Likely virus infection of existing system binary

How to determine Trojan.Win32.Ekstak.alnft?

File Info:
name: 05274A99A7A206BD7C65.mlw
path: /opt/CAPEv2/storage/binaries/b7a2f91e4f974761155de860ec5885ac70ac74599828b3da6d4f6d21457d1828
crc32: 61FE7D5C
md5: 05274a99a7a206bd7c65e4a77dc7da8d
sha1: caaa8dcb245a769ee5942ce3534ed3df366710a1
sha256: b7a2f91e4f974761155de860ec5885ac70ac74599828b3da6d4f6d21457d1828
sha512: 718d39b356e66d685381bd9bd05543598c7b3f4c58894e041ad496406a65341ec69bc900b2527df6be0f4c9f957a70150457bf8b57c273c11d3e8be00043cba8
ssdeep: 196608:E9HPHmVtd0e9wOYwYpmDpUNtAzSfwG1fyYD:wHPGV8kwOjYYDeNtYSfJjD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B686239BBF5192DEC9569C76E23144F91CF27633283050DC1BBA9ABA0D312E0E7674D2
sha3_384: 0933c274015b84820346dba868d6a8917a6b7b96b2a67b0b8d6f0bb4e43cadfb9d64bef502c7b98e50245729f6596d0f
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Over Keys                                                   
FileDescription: Over Keys Setup                                             
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Ekstak.alnft also known as:

How to remove Trojan.Win32.Ekstak.alnft?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.