Trojan

Should I remove “Trojan.Win32.Vebzenpak.xwf”?

Malware Removal

The Trojan.Win32.Vebzenpak.xwf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vebzenpak.xwf virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Vebzenpak.xwf?


File Info:

crc32: EAEB228A
md5: f09ff4138c5fae8fceb54bf18073c197
name: 1140o9dudttc.exe
sha1: b794cd871b8d58cfe8a9f8f5b39d8cb293bc34f7
sha256: f8ab5a38866baa14d6004ab8a99bc76fe7b0e5e0f30539e49e864e9a16e36b62
sha512: fb71751c48abc918d132f9c96c5722c0a09f5d0d1b80852edfbd4447a7480c4f1900eacb7b36f92dc1ff6d24365b2628cf52f4535b02cc8efc4a19f07b29a4bd
ssdeep: 6144:BRo8wwe9YCOnvHIOOpDTUyEYb/HJWQ8LOXwuAmLOZGtxcQaWtDoXyEjdARQ9b87L:B68ww/H8UypdwmLttxVuXyOzb8JeGmLw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: Charon (c) 2008
InternalName: Vistor3
FileVersion: 3.05.0034
CompanyName: Charon
Comments: Vistor UI Project v3.05
ProductName: Vistor v3.05
ProductVersion: 3.05.0034
FileDescription: Vistor UI Project v3.05
OriginalFilename: Vistor3.exe

Trojan.Win32.Vebzenpak.xwf also known as:

MicroWorld-eScanTrojan.GenericKD.34210505
FireEyeGeneric.mg.f09ff4138c5fae8f
McAfeeTrickbot-FSNZ!F09FF4138C5F
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0056af7c1 )
BitDefenderTrojan.GenericKD.34210505
K7GWTrojan ( 0056af7c1 )
Cybereasonmalicious.71b8d5
Invinceaheuristic
F-ProtW32/VBKrypt.ANU.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
GDataTrojan.GenericKD.34210505
KasperskyTrojan.Win32.Vebzenpak.xwf
AegisLabTrojan.Win32.Vebzenpak.4!c
RisingTrojan.GenKryptik!8.AA55 (CLOUD)
Endgamemalicious (high confidence)
SophosMal/Generic-S
F-SecureTrojan.TR/Kryptik.mvacg
DrWebTrojan.Packed.140
EmsisoftTrojan.Agent (A)
IkarusTrojan.Win32.Krypt
CyrenW32/VBKrypt.ANU.gen!Eldorado
AviraTR/Kryptik.mvacg
MAXmalware (ai score=89)
ArcabitTrojan.Generic.D20A02C9
ZoneAlarmTrojan.Win32.Vebzenpak.xwf
MicrosoftTrojan:Win32/Zenpak.DEB!MTB
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Kryptik.R345543
Ad-AwareTrojan.GenericKD.34210505
MalwarebytesTrojan.Emotet
ESET-NOD32a variant of Win32/GenKryptik.EOQZ
SentinelOneDFI – Malicious PE
FortinetW32/GenKryptik.EOQZ!tr
BitDefenderThetaGen:NN.ZevbaF.34138.Dm1@am1cAmfi
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/Trojan.f2a

How to remove Trojan.Win32.Vebzenpak.xwf?

Trojan.Win32.Vebzenpak.xwf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment