Trojan.Win32.Ekstak.vho information

The Trojan.Win32.Ekstak.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Ekstak.vho virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Ekstak.vho?


File Info:
crc32: 4475235C
md5: 83596b289190f6b13ba199d240c4f5ce
name: extrimsetup-18.12.2019-.exe_70446402.exe
sha1: bc183cc763e61e2391ffab26842c1f757250556f
sha256: 07d87d133c43c2929b5a25827930213a0d61d7c6a1d1d83027ef4492de85b2f4
sha512: 070d317280c932e0c93000c853efb2f48c39c25110c999df9d1d0a6aa5fab5d52e7aabf4dba906d951fd3c5a2fdabb605de2fde81a02d66c9b62cda83402e95c
ssdeep: 98304:q9E4LNpCqH85Lht33KeLUKqihr/EeX1whcdIuxLzFfSELpsZf0Jo:qzGk2htnF3rTXKhUVpfSsYs6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: Id                                                          
ProductVersion: 2.7.10.6                                          
FileDescription: Id Setup                                                    
Translation: 0x0000 0x04b0

Trojan.Win32.Ekstak.vho also known as:

MicroWorld-eScan	Application.DealAlpha.2.Gen
CMC	Trojan.Win32.Inject!O
BitDefender	Application.DealAlpha.2.Gen
Symantec	ML.Attribute.HighConfidence
GData	Application.DealAlpha.2.Gen (5x)
Kaspersky	HEUR:Trojan.Win32.Ekstak.vho
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazrtH0qf/6LZ1CZ5i+khzBF/)
Endgame	malicious (moderate confidence)
Emsisoft	Application.DealAlpha.2.Gen (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen3
DrWeb	Trojan.Zadved.1636
FireEye	Application.DealAlpha.2.Gen
Sophos	Download Assistant (PUA)
Webroot	W32.Trojan.Tr.Crypt.Xpack.Gen3
Avira	TR/Crypt.XPACK.Gen3
eGambit	Unsafe.AI_Score_99%
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Application.DealAlpha.2.Gen
ZoneAlarm	HEUR:Trojan.Win32.Ekstak.vho
Acronis	suspicious
Malwarebytes	Adware.DownloadAssistant
ESET-NOD32	a variant of Win32/DownloadAssistant.Y potentially unwanted
Fortinet	W32/Ekstak.VHO!tr
Qihoo-360	Win32/Trojan.66d

How to remove Trojan.Win32.Ekstak.vho?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Ekstak.vho information