Trojan.Win32.Vebzenpak.ahdx malicious file

The Trojan.Win32.Vebzenpak.ahdx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Vebzenpak.ahdx virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Attempts to connect to a dead IP:Port (1 unique times)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Spanish (Modern)
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Checks for the presence of known windows from debuggers and forensic tools
• CAPE detected the PoisonIvy malware family

How to determine Trojan.Win32.Vebzenpak.ahdx?

File Info:
name: 32214ABFDCA9FEC72EF6.mlw
path: /opt/CAPEv2/storage/binaries/f650372e00f6c16633c4e07d202d6c1d5e94c6dd7e19154498654689c90cf278
crc32: 09F9B331
md5: 32214abfdca9fec72ef6dbbe5980f3b4
sha1: 7faa2dedca3fdf34140b2f2359b42a9b6560acac
sha256: f650372e00f6c16633c4e07d202d6c1d5e94c6dd7e19154498654689c90cf278
sha512: c9474cdf85bdafdc90e0fd29b22486ba8c943161bc5caf277ce44f9b593dee7cf214e340515a3aa38e097cee935f402125cd869433a94fad78993f90e3d2dfbe
ssdeep: 6144:F4nH8UJezeGylpVGv9/KatV/Ab9vHj32MWL4:ocUIze7AHV/Ab9vHL2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FBD4930A7D5D8489D467E0315B66A2BC1520BE173AC30DE72ED03F2BF839F54F621A69
sha3_384: e844bc655f9ba763e0ec73315a9097a8b5239a4f59614e8e12abe555e744a081095535e2071273c80c3b5be2e34c8e57
ep_bytes: 6878214000e8eeffffff000000000000
timestamp: 2022-02-04 01:15:23

Version Info:
Translation: 0x0c0a 0x04b0
CompanyName: PalmBytes
LegalCopyright: Markus Palme, 2001
ProductName: MP-Pad
FileVersion: 2.02
ProductVersion: 2.02
InternalName: new
OriginalFilename: new.scr

Trojan.Win32.Vebzenpak.ahdx also known as:

How to remove Trojan.Win32.Vebzenpak.ahdx?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.