Trojan

Trojan.Win32.Vebzenpak.admj removal

Malware Removal

The Trojan.Win32.Vebzenpak.admj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vebzenpak.admj virus can do?

  • Executable code extraction
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Finnish
  • The binary likely contains encrypted or compressed data.
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.admj?


File Info:

crc32: 823D6007
md5: c61576b75a86f0e6d689031842786efd
name: C61576B75A86F0E6D689031842786EFD.mlw
sha1: 3e8e84edc0d372422411bbcd857a332a1f24f9d2
sha256: 977da315616af23ea3fe814261140a1ff820210a056d39126a65a9b789f751a6
sha512: 2f112e2d558c632e134d2b3249120090622dcd84623be47d6851e42d209ef57620788e42e6878246f76da0cf755a381162b46faecd535a23718581f895d9e75e
ssdeep: 6144:f0RY/TyW0mL1QnLSNFXI21MfCDKbGsRtdumLIs/q+xmG3SOKCtqhhl0wN:KgT/0mL1f712CD6GyDuv+SOHqhhau
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: dvdbase
FileVersion: 0.05.0002
CompanyName: CIBM
ProductName: DVDBase
ProductVersion: 0.05.0002
FileDescription: DVD Collection Tracking Application
OriginalFilename: dvdbase.exe

Trojan.Win32.Vebzenpak.admj also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.72814
FireEyeGeneric.mg.c61576b75a86f0e6
CylanceUnsafe
VIPREWin32.Malware!Drop
AegisLabTrojan.Win32.Vebzenpak.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderTrojan.GenericKDZ.72814
K7GWTrojan ( 0057734e1 )
K7AntiVirusTrojan ( 0057734e1 )
CyrenW32/VBKrypt.AQP.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BankerX-gen [Trj]
ClamAVWin.Malware.Filerepmalware-9829180-0
KasperskyTrojan.Win32.Vebzenpak.admj
AlibabaTrojan:Win32/Vebzenpak.b3701f49
RisingTrojan.Kryptik!1.C606 (CLOUD)
Ad-AwareTrojan.GenericKDZ.72814
SophosMal/Generic-S
F-SecureTrojan.TR/Kryptik.qxavg
DrWebTrojan.KillProc2.15053
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
EmsisoftTrojan.GenericKDZ.72814 (B)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Trojan.Gen
AviraTR/Kryptik.qxavg
MAXmalware (ai score=80)
MicrosoftTrojan:Win32/Vebzenpak.RND!MTB
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Generic.D11C6E
ZoneAlarmTrojan.Win32.Vebzenpak.admj
GDataTrojan.GenericKDZ.72814
CynetMalicious (score: 100)
Acronissuspicious
McAfeeEmotet-FRN!C61576B75A86
TACHYONTrojan/W32.VB-Vebzenpak.409600
MalwarebytesTrojan.TrickBot
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Injector.EOKP
TrendMicro-HouseCallTROJ_GEN.R002H0DB321
TencentWin32.Trojan.Vebzenpak.Swan
IkarusTrojan.Win32.Krypt
FortinetW32/GenKryptik.FAZV!tr
BitDefenderThetaGen:NN.ZevbaCO.34804.zm0@aGADIkaG
AVGWin32:BankerX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Vebzenpak.HgIASOUA

How to remove Trojan.Win32.Vebzenpak.admj?

Trojan.Win32.Vebzenpak.admj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment