About "Trojan.Win32.Zenpak.aiir" infection

The Trojan.Win32.Zenpak.aiir is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Zenpak.aiir virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Zenpak.aiir?


File Info:
crc32: 0E708CD6
md5: 86e52277cce4aa49694729055c481e5a
name: tmpjwyytmfk
sha1: fa88846e6b16ae607e19356761d42beb2c37be9f
sha256: b65a639e435aa80ece4326d85052f980a9992788d4b9b7fb94141d7e82ddc960
sha512: 381becd40fe6653da29f55145454a08c4ddf98ed71b4af19ffd7d7548f2ae4005bc3b8470edb5a6d2666628a9265bf5a7b6056f9633b9534657dfdc3ca62bc37
ssdeep: 6144:wQYmU2JFD8euKJ7lfJy7rcYrDZM8DY8gGTlj:wMU2z8NKJRCrDZM8D5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2009 Free Software Foundation 
InternalName: tmef
FileVersion: 6.4.3.2395
License: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License; see www.gnu.org/copyleft/gpl.html. 
CompanyName: GnuWin32 
LegalTrademarks: GnuWin32xae, Grepxae, grepxae
WWW: http://www.gnu.org/software/grep/grep.html
ProductName: Tmef
ProductVersion: 6.4.3.2395
FileDescription: Grep: print lines matching a pattern
OriginalFilename: tmef.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Zenpak.aiir also known as:

Bkav	HW32.Packed.
FireEye	Generic.mg.86e52277cce4aa49
McAfee	GenericRXAA-AA!86E52277CCE4
Malwarebytes	Trojan.Packed
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKD.43379382
K7GW	Riskware ( 0040eff71 )
Arcabit	Trojan.Generic.D295EAB6
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34128.mu0@aKCHeVoi
Cyren	W32/Trojan.HRKC-1172
Symantec	Packed.Generic.553
ESET-NOD32	Win64/Dridex.AY
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Zenpak.aiir
Alibaba	Trojan:Win32/EmotetedCryptc.180910
MicroWorld-eScan	Trojan.GenericKD.43379382
Rising	Trojan.Zenpak!8.10372 (CLOUD)
Endgame	malicious (high confidence)
McAfee-GW-Edition	Artemis
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
F-Prot	W32/Trojan3.APGO
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Dridex.ARJ!MTB
ZoneAlarm	Trojan.Win32.Zenpak.aiir
GData	Trojan.GenericKD.43379382
Acronis	suspicious
Ad-Aware	Trojan.GenericKD.43379382
Ikarus	Win32.Outbreak
Webroot	W32.Trojan.Gen
AVG	FileRepMalware
Cybereason	malicious.e6b16a
Avast	FileRepMalware
Qihoo-360	HEUR/QVM20.1.1D19.Malware.Gen

How to remove Trojan.Win32.Zenpak.aiir?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan.Win32.Zenpak.aiir” infection