Trojan.Win32.Vebzenpak.xvm (file analysis)

The Trojan.Win32.Vebzenpak.xvm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Vebzenpak.xvm virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.xvm?


File Info:
crc32: D1656BF9
md5: d7948aa8bca775892571b2ca278ff530
name: 690o9dudttc.exe
sha1: 36b61e52da5b20538664ce2f3ea14c51dd6c9f88
sha256: 610302748ce88be6b45d3dbacbe3cb18c1b2d94b049537389723f41cb0636569
sha512: d2d69bab331b753172497315f3c77ebf198b760de65690d14b4a4f6db3f390656c41086731ba3b991f82d7451772f531bc97d23eeb45083c175f8d8af420ffaf
ssdeep: 6144:BRo8wwe9YCOnvHIOOpDTUyEYb/HJWQ8LOXwuAmLOZGtxcQaWtDoXyEjdARQ9b87X:B68ww/H8UypdwmLttxVuXyOzb8JeGmLC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Charon (c) 2008
InternalName: Vistor3
FileVersion: 3.05.0034
CompanyName: Charon
Comments: Vistor UI Project v3.05
ProductName: Vistor v3.05
ProductVersion: 3.05.0034
FileDescription: Vistor UI Project v3.05
OriginalFilename: Vistor3.exe

Trojan.Win32.Vebzenpak.xvm also known as:

DrWeb	Trojan.Packed.140
MicroWorld-eScan	Trojan.GenericKD.34210505
FireEye	Generic.mg.d7948aa8bca77589
McAfee	Trickbot-FSNZ!D7948AA8BCA7
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Vebzenpak.4!c
K7AntiVirus	Trojan ( 0056af7c1 )
BitDefender	Trojan.GenericKD.34210505
K7GW	Trojan ( 0056af7c1 )
Cybereason	malicious.2da5b2
BitDefenderTheta	Gen:NN.ZevbaF.34138.Dm1@am1cAmfi
F-Prot	W32/VBKrypt.ANU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Trojan.GenericKD.34210505
Kaspersky	Trojan.Win32.Vebzenpak.xvm
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware	Trojan.GenericKD.34210505
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Kryptik.mvacg
Invincea	heuristic
Emsisoft	Trojan.Agent (A)
SentinelOne	DFI – Malicious PE
Cyren	W32/VBKrypt.ANU.gen!Eldorado
Avira	TR/Kryptik.mvacg
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D20A02C9
ZoneAlarm	Trojan.Win32.Vebzenpak.xvm
Microsoft	Trojan:Win32/Zenpak.DEB!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Kryptik.R345543
MAX	malware (ai score=83)
Malwarebytes	Trojan.Emotet
ESET-NOD32	a variant of Win32/GenKryptik.EOQZ
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/GenKryptik.EOQZ!tr
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Generic/Trojan.f2a

How to remove Trojan.Win32.Vebzenpak.xvm?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Vebzenpak.xvm (file analysis)