Should I remove “Trojan.Win32.Ekstak.aloml”?

The Trojan.Win32.Ekstak.aloml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Ekstak.aloml virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Likely virus infection of existing system binary

How to determine Trojan.Win32.Ekstak.aloml?

File Info:
name: AE9C70710290147C7E45.mlw
path: /opt/CAPEv2/storage/binaries/ebb088e501d626be21682f9beedbf6a7a9a663a170a79ed0c057fc4d5ab4211f
crc32: 5B84E26B
md5: ae9c70710290147c7e455dae2c34f962
sha1: 11f6d86d1ea29e67ed8a166e74cf2fc31def42b4
sha256: ebb088e501d626be21682f9beedbf6a7a9a663a170a79ed0c057fc4d5ab4211f
sha512: dd023c9e88c94356592d16bb6a23c5e8ff4024675db9680234fa4512f4f682b01c9c9195ac9cb916629c1ba843a4c6409a587b616d6088d4c15e97eb32d8a97f
ssdeep: 196608:thKUm7xkIcZrnntnq8gKrl/4mBzKQ+j1l3ZoMuQ5P/etyE:IkVZrnbg6RB/+j1pZolW+tt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T121A633D1F707A374E1A654FB042F78E78926FFB1B1F843443454F24A8AB30A5DAA9532
sha3_384: 8e11533cdc010c3dba6d0aaf28191e561076dfe3b9f6da861b948f2aea06e95c088f9d28e457cc525ae6e15600eb84c9
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: CD Master LLD                                               
FileDescription: QL Server Repair Toolbox Setup                              
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Ekstak.aloml also known as:

How to remove Trojan.Win32.Ekstak.aloml?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.