Trojan

What is “Trojan.Win32.Vebzenpak.aawu”?

Malware Removal

The Trojan.Win32.Vebzenpak.aawu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vebzenpak.aawu virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.aawu?


File Info:

crc32: 23DEF05C
md5: 14d984497ac94324ef3a42df06744aca
name: upload_file
sha1: 6f9ddae125f5f0ec825d32af240984a09cbc7813
sha256: 93a0768a70af257d82f58826a8e81759ed90a1f28efdf25337848b926da40e65
sha512: 3d07fd6d5c57a19231a877c71b2c8b458d14791095475e121b14e3a17337d2125b1adcaed312e4ef7c00533da4f7446756b13df1197a4c2e8a62565257547d00
ssdeep: 384:wB0QpJb7zjsuLpW9+Go3wGaf0Oj/KuQrnDrts4kunnlQa1/Y4th:wB0mbHjsuLg9ZogtMOm9bQunlQoFt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0410 0x04b0
InternalName: UDTAGETSKON
FileVersion: 2.00
CompanyName: Taxan
LegalTrademarks:
Comments: Taxan
ProductName: Taxan
ProductVersion: 2.00
OriginalFilename: UDTAGETSKON.exe

Trojan.Win32.Vebzenpak.aawu also known as:

BkavW32.AutorunHAE.Fam.Worm
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.44010217
FireEyeGeneric.mg.14d984497ac94324
CAT-QuickHealTrojan.Vebzenpak
McAfeePWS-FCQV!14D984497AC9
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Vebzenpak.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_80% (W)
BitDefenderTrojan.GenericKD.44010217
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
TrendMicroTROJ_GEN.R057C0DJ920
BitDefenderThetaGen:NN.ZevbaF.34566.cm0@a8CBT3kG
CyrenW32/Trojan.FHRD-8816
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:DropperX-gen [Drp]
ClamAVWin.Trojan.VBGeneric-9775230-0
KasperskyTrojan.Win32.Vebzenpak.aawu
AlibabaTrojanDownloader:Win32/Vebzenpak.111d3125
NANO-AntivirusTrojan.Win32.Vebzenpak.hzcufa
ViRobotTrojan.Win32.Z.Pynamer.40960
Ad-AwareTrojan.GenericKD.44010217
EmsisoftTrojan.GenericKD.44010217 (B)
ComodoMalware@#39jrtz0fskxk6
InvinceaMal/Generic-R + Mal/FareitVB-AE
McAfee-GW-EditionPWS-FCQV!14D984497AC9
SophosMal/FareitVB-AE
IkarusTrojan.VB.Crypt
JiangminTrojan.Vebzenpak.hta
MAXmalware (ai score=89)
MicrosoftTrojan:Win32/Pynamer.A!ac
ArcabitTrojan.Generic.D29F8AE9
ZoneAlarmTrojan.Win32.Vebzenpak.aawu
GDataTrojan.GenericKD.44010217
AhnLab-V3Trojan/Win32.VBKrypt.R352865
VBA32Trojan.Wacatac
ALYacTrojan.GenericKD.44010217
MalwarebytesTrojan.Injector
PandaTrj/GdSda.A
ESET-NOD32Win32/TrojanDownloader.Agent.FCS
TrendMicro-HouseCallTROJ_GEN.R057C0DJ920
RisingDownloader.Agent!8.B23 (TFE:5:ouMP5UkhkzB)
YandexTrojan.Igent.bUAo06.36
eGambitUnsafe.AI_Score_100%
FortinetMalicious_Behavior.SB
AVGWin32:DropperX-gen [Drp]
Qihoo-360Win32/Trojan.09e

How to remove Trojan.Win32.Vebzenpak.aawu?

Trojan.Win32.Vebzenpak.aawu removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment