Should I remove “Trojan.Win32.Vebzenpak.actj”?

The Trojan.Win32.Vebzenpak.actj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Vebzenpak.actj virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Vebzenpak.actj?


File Info:
crc32: B2F7F7A0
md5: 20ccc5a0a8fb611c04bdaa0b82b4bd49
name: 20CCC5A0A8FB611C04BDAA0B82B4BD49.mlw
sha1: 4e8c4e3950ee55ceb20ca8175680f48f0049cd41
sha256: 5453964804b50218fe767c2ced9e4c7f180f9e34dc90a7c3b6e99b5efe9bea18
sha512: 86a14ec927cfbbf49a846ee468513f42df7eb50f413ad84ffe6aca3d5a8f3e082fea53ebe3fb7d63bfc05416a6cc975f1b5020760443b736cc5a97a88bf5909f
ssdeep: 768:9dlY/6tjG+Ud+tZobinz5xQbIhgviAQHXMLlCA00P122I:TW/6tjtUdge2znQbIhgvGt2I
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Flatnose
FileVersion: 2.02
CompanyName: ARM Limited 
Comments: ARM Limited 
ProductName: Velsignende
ProductVersion: 2.02
OriginalFilename: Flatnose.exe

Trojan.Win32.Vebzenpak.actj also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45063515
FireEye	Trojan.GenericKD.45063515
McAfee	GenericRXAA-AA!20CCC5A0A8FB
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 00574de31 )
Alibaba	Trojan:Win32/Vebzenpak.902b2652
K7GW	Trojan ( 00574de31 )
Cyren	W32/Trojan.XRKA-7129
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_FRS.VSNW12L20
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Vebzenpak.actj
BitDefender	Trojan.GenericKD.45063515
ViRobot	Trojan.Win32.Z.Vebzenpak.69632.AD
Avast	Win32:Trojan-gen
Rising	Trojan.Injector!8.C4 (TFE:5:5tBaouF0kcS)
Ad-Aware	Trojan.GenericKD.45063515
Emsisoft	Trojan.GenericKD.45063515 (B)
Comodo	Malware@#2vpq27zcyi1wx
DrWeb	Trojan.Siggen11.55935
TrendMicro	TROJ_FRS.VSNW12L20
McAfee-GW-Edition	BehavesLike.Win32.Trojan.km
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Injector
Kingsoft	Win32.Troj.Vebzenpak.ac.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AA54
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D2AF9D5B
ZoneAlarm	Trojan.Win32.Vebzenpak.actj
GData	Trojan.GenericKD.45063515
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.45063515
MAX	malware (ai score=99)
Malwarebytes	Trojan.Dropper
APEX	Malicious
ESET-NOD32	a variant of Win32/Injector.EODG
Tencent	Win32.Trojan.Vebzenpak.Hqlw
Yandex	Trojan.Vebzenpak!6VFUMQYGdPY
Fortinet	W32/EODG!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.ec6

How to remove Trojan.Win32.Vebzenpak.actj?

Trojan.Win32.Vebzenpak.actj removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X