Trojan

What is “Trojan.Win32.Vebzenpak.dco”?

Malware Removal

The Trojan.Win32.Vebzenpak.dco is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vebzenpak.dco virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Traditional)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.dco?


File Info:

crc32: C3AF5C35
md5: abb6a866b08b6ab69650895f4d60afdd
name: ds.exe
sha1: cc5b295d958c5881d75c24ca13cd73b8e6be1e0b
sha256: deaa7286d57dd1f6151dff111f5faa573b749df312f4b5417068882f01787a79
sha512: 2c1f5bfbc9a5690d348ac30bd875b7076e60037251e1500ac42e012c08de9c57fc325940fb2ddc0048e616a7d9b08113a6756102525ec012e2d9365c77164ede
ssdeep: 768:txMqJzrmwtGAOuTlEwtsde4Xqk5kSUWvcUJUED:tCye6Ee4XqkiWlJn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0404 0x04b0
InternalName: assente
FileVersion: 1.00
CompanyName: heartsick
Comments: Twofold1
ProductName: vorticel
ProductVersion: 1.00
FileDescription: CUBOMED
OriginalFilename: assente.exe

Trojan.Win32.Vebzenpak.dco also known as:

DrWebTrojan.DownLoader33.2828
MicroWorld-eScanTrojan.GenericKD.33287303
FireEyeTrojan.GenericKD.33287303
McAfeeFareit-FRM!ABB6A866B08B
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.33287303
K7GWRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZevbaF.34090.dm0@aeqw!Tgb
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.33287303
KasperskyTrojan.Win32.Vebzenpak.dco
NANO-AntivirusTrojan.Win32.Dwn.hbaapt
ViRobotTrojan.Win32.S.Agent.57344.BZT
RisingDownloader.Agent!8.B23 (CLOUD)
EmsisoftTrojan.GenericKD.33287303 (B)
ComodoMalware@#2gnc706dlaaq4
McAfee-GW-EditionBehavesLike.Win32.Trojan.qt
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Agent
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Generic.D1FBEC87
ZoneAlarmTrojan.Win32.Vebzenpak.dco
ALYacTrojan.GenericKD.33287388
MalwarebytesTrojan.MalPack.VB
PandaGeneric Malware
ESET-NOD32Win32/TrojanDownloader.Agent.EYK
TencentWin32.Trojan.Vebzenpak.Lpva
eGambitUnsafe.AI_Score_90%
FortinetMalicious_Behavior.SB
Ad-AwareTrojan.GenericKD.33287303
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Generic/HEUR/QVM03.0.4A01.Malware.Gen

How to remove Trojan.Win32.Vebzenpak.dco?

Trojan.Win32.Vebzenpak.dco removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment