Trojan.Win32.Vebzenpak.gzm removal

The Trojan.Win32.Vebzenpak.gzm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Vebzenpak.gzm virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.gzm?


File Info:
crc32: EA92F4EB
md5: f41492a72bbc3073991c031139c5507c
name: Ligkistemagasinets_PACKED.exe
sha1: d026739c373eaa516e7c71fc83c752639ac8282b
sha256: aee1c1e032eb65d7d1dfd2e5e114ac5e28ecf5c710ad9b459bb5bb767fd5c033
sha512: 43e86d57e5bf3c182db851f1aba11889ad0f762ac89d11456698b4fabf07a3a85f3ee5b1dcd9f408f5350f11e25d56c6fc810ec686277675b54b93c4a06156c6
ssdeep: 3072:Kry+bnr+O1P5GWp1icKAArDZz4N9GhbkrNEk1cYg5FpHo2:Kry+bnr+cp0yN90QEOg9I
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            .MUI
Translation: 0x0409 0x04b0

Trojan.Win32.Vebzenpak.gzm also known as:

MicroWorld-eScan	Gen:Heur.Crifi.3
FireEye	Gen:Heur.Crifi.3
Sangfor	Malware
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Heur.Crifi.3
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Gen:Heur.Crifi.3
Kaspersky	Trojan.Win32.Vebzenpak.gzm
AegisLab	Trojan.Win32.Crifi.4!c
Rising	Spyware.Zbot!8.16B (CLOUD)
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dropper.VB.Gen
Invincea	heuristic
Emsisoft	Gen:Heur.Crifi.3 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.VB.Gen
Antiy-AVL	Trojan[Backdoor]/MSIL.SpyGate
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Crifi.3
ZoneAlarm	Trojan.Win32.Vebzenpak.gzm
ALYac	Gen:Heur.Crifi.3
MAX	malware (ai score=83)
Ad-Aware	Gen:Heur.Crifi.3
ESET-NOD32	Win32/TrojanDownloader.Agent.EYK
Tencent	Win32.Trojan.Vebzenpak.Eacq
Ikarus	Trojan-Spy.Agent
Fortinet	W32/GenKryptik.EGBI!tr
BitDefenderTheta	AI:Packer.04146AB323
Cybereason	malicious.72bbc3
Qihoo-360	Win32/Trojan.910

How to remove Trojan.Win32.Vebzenpak.gzm?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Vebzenpak.gzm removal