Trojan

Trojan.Win32.Vebzenpak.aayn (file analysis)

Malware Removal

The Trojan.Win32.Vebzenpak.aayn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vebzenpak.aayn virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Win32.Vebzenpak.aayn?


File Info:

crc32: AF5D7965
md5: b73eb297795a8846ad2c824cd06712bb
name: upload_file
sha1: 670024582fda1897c2ff809c4eabd8a26f5bf065
sha256: fce8a94adda657c79b4fbe7b2b4ef4062d27b0c15108b23ae6cb9dc545a267f8
sha512: a4304251465ae097209fc03b3f8741c40a6b0e5bc7bcc28f1528b65ec213db502e734c55f3b75f0bf146dbee3e36698f81029ad2ea7c1438f9a0a56d768f72a5
ssdeep: 768:9PaUcuLunkgEarF7igAzH0p9BS/5QNzlJF:lSu7Farcg0HES/C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0410 0x04b0
InternalName: BALKJOLEMOU
FileVersion: 2.00
CompanyName: Taxan
LegalTrademarks:
Comments: Taxan
ProductName: Taxan
ProductVersion: 2.00
OriginalFilename: BALKJOLEMOU.exe

Trojan.Win32.Vebzenpak.aayn also known as:

BkavW32.AIDetectVM.malware2
DrWebTrojan.DownLoader34.62972
MicroWorld-eScanTrojan.GenericKD.34719456
FireEyeGeneric.mg.b73eb297795a8846
McAfeePWS-FCQV!B73EB297795A
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.34719456
K7GWRiskware ( 0040eff71 )
InvinceaMal/Generic-S
BitDefenderThetaGen:NN.ZevbaF.34566.cm0@auQzjgjG
CyrenW32/Trojan.NIMV-2086
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Trojan.VBGeneric-9775688-0
KasperskyTrojan.Win32.Vebzenpak.aayn
AlibabaTrojanDownloader:Win32/Vebzenpak.7b728821
NANO-AntivirusTrojan.Win32.Vebzenpak.hzhnsf
ViRobotTrojan.Win32.Z.Agent.45056.GIN
RisingTrojan.Injector!8.C4 (TFE:5:a9DX3avmxuV)
Ad-AwareTrojan.GenericKD.34719456
SophosMal/Generic-S
ComodoMalware@#30v33xsp5gp76
TrendMicroTrojan.Win32.VEBZENPAK.USMANJ920
McAfee-GW-EditionPWS-FCQV!B73EB297795A
EmsisoftTrojan.GenericKD.34719456 (B)
IkarusTrojan.Win32.Injector
Antiy-AVLTrojan/Win32.Vebzenpak
MicrosoftTrojan:Win32/Ymacco.AAFC
ArcabitTrojan.Generic.D211C6E0
ZoneAlarmTrojan.Win32.Vebzenpak.aayn
GDataTrojan.GenericKD.34719456
AhnLab-V3Trojan/Win32.VBKrypt.R352865
VBA32TScope.Trojan.VB
ALYacTrojan.Agent.GuLoader
MAXmalware (ai score=85)
MalwarebytesTrojan.Downloader
PandaTrj/GdSda.A
ESET-NOD32Win32/TrojanDownloader.Agent.FCS
TrendMicro-HouseCallTrojan.Win32.VEBZENPAK.USMANJ920
FortinetW32/Generik.FTVWTDP!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.d34

How to remove Trojan.Win32.Vebzenpak.aayn?

Trojan.Win32.Vebzenpak.aayn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment