Trojan.Win32.Ekstak.anzhr information

The Trojan.Win32.Ekstak.anzhr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Ekstak.anzhr virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Deletes executed files from disk

How to determine Trojan.Win32.Ekstak.anzhr?

File Info:
name: 3328F8AE14B5EBE101A1.mlw
path: /opt/CAPEv2/storage/binaries/762775e2459fee328f622b39efdc2e995a515506d6d0d7cfb42f188e456d0b40
crc32: 7DC79F2A
md5: 3328f8ae14b5ebe101a101cad50a3aee
sha1: 2e704a3e5815faa1c3faf5df31fbeace302cdf6f
sha256: 762775e2459fee328f622b39efdc2e995a515506d6d0d7cfb42f188e456d0b40
sha512: 8504a74a497e6e7aebdf0bf3abefb9f5fff4d1595b70565510459b86f015bfc1ab0fe40a4ec56578ce0efd31cb2c1e95255401f60714ca664dbdc79a6b6f20ec
ssdeep: 98304:ncParpFHjK6Of/dF7Epyf1qPouzVkKBIRI43pfymAqMhv:LtF26OndRE4Nq7zVkKBIh3cm9Mh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T105263395EE0C883FF17282B5EA228E24C8E72455A97940F8BFBCD65FC8DF5C098159D0
sha3_384: 4aacbe4c278d9cdedbea0c0b32055de077a468a1890f457d2f49f06168b55595be7dee33a6056abe922380767481b001
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 2023-07-23 00:45:29

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: LQ Media Fixer Setup                                        
FileVersion:                     
LegalCopyright:                                                                                                     
Translation: 0x0409 0x04e4

Trojan.Win32.Ekstak.anzhr also known as:

How to remove Trojan.Win32.Ekstak.anzhr?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.