Trojan

What is “Trojan:Win32/Ejik!A”?

Malware Removal

The Trojan:Win32/Ejik!A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ejik!A virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/Ejik!A?


File Info:

name: A51AA1FBF3EA5D1F9D35.mlw
path: /opt/CAPEv2/storage/binaries/d68f05d2a162be89c9986a9f734d38e5ba2b24433021946eef946c77b6315b16
crc32: 20E855B7
md5: a51aa1fbf3ea5d1f9d355773c9db49de
sha1: 866fd640c5525ef5c6a9b60fdb5147ea5585d7d1
sha256: d68f05d2a162be89c9986a9f734d38e5ba2b24433021946eef946c77b6315b16
sha512: 555b396c1b27d7e05cdf429a2bbbc553400de321b4c0a14920f87bcdfce0722e8e0d3e3ac6a7986b33477290568c0f45ed39c6faea9c5ea9ffbc2fc1c0882624
ssdeep: 3072:raP7qPEt7JKC+hL2/TbvTea1cobXTsYatRPw4qiIEuwE6Np3YEqDPNXcnSORYFtE:rC7YsUXaJaWD65iPpcnhYFuBSmAF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17E549E3BF5C088B3E2655ABDDDCAC1BDA439BD111E3E246B7BE52E1C0A3E19214745C2
sha3_384: a04f8ba839cccfb062441ceb0cf1323ad5e9407777dd87cdb447cf1116900d908813abfcbfd079aca36f7519ffd27fd5
ep_bytes: 558bec83c4ec53565733c08945ecb88c
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan:Win32/Ejik!A also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Injector.lDYg
MicroWorld-eScanGen:Variant.Symmi.96307
FireEyeGeneric.mg.a51aa1fbf3ea5d1f
SkyhighBehavesLike.Win32.Picsys.dh
McAfeeArtemis!A51AA1FBF3EA
MalwarebytesGeneric.Malware/Suspicious
VIPREGen:Variant.Symmi.96307
SangforTrojan.Win32.Save.a
K7AntiVirusAdware ( 0054bc391 )
BitDefenderGen:Variant.Symmi.96307
K7GWAdware ( 0054bc391 )
Cybereasonmalicious.0c5525
BitDefenderThetaGen:NN.ZelphiF.36792.riW@aelNESbb
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Adware.Ejik.EC
APEXMalicious
AlibabaTrojan:Win32/AgentMB.41d86a20
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Ejik!8.1241 (TFE:4:U9inLtixQ4V)
EmsisoftGen:Variant.Symmi.96307 (B)
F-SecureDropper.DR/Patched.Ren.Gen
DrWebTrojan.Click.18122
ZillyaAdware.Ejik.Win32.796
TrendMicroTROJ_GEN.R002C0DH123
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.Crypt
GoogleDetected
AviraDR/Patched.Ren.Gen
Antiy-AVLGrayWare[AdWare]/Win32.Ejik
KingsoftWin32.Troj.RealmT.qy.430084
MicrosoftTrojan:Win32/Ejik.gen!A
XcitiumApplication.Win32.Adware.Ejik.EC@c6qx
ArcabitTrojan.Symmi.D17833
GDataGen:Variant.Symmi.96307
CynetMalicious (score: 100)
AhnLab-V3Adware/Win32.Ejik.R9644
ALYacGen:Variant.Symmi.96307
MAXmalware (ai score=83)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaAdware/Ejik
TrendMicro-HouseCallTROJ_GEN.R002C0DH123
TencentWin32.Trojan.Patched.Wimw
YandexTrojan.DR.Ejik.Gen!Pac
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.185639802.susgen
FortinetPossibleThreat.PALLAS.H
AVGWin32:Adware-gen [Adw]
AvastWin32:Adware-gen [Adw]
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan:Win32/Ejik!A?

Trojan:Win32/Ejik!A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment