Trojan.Win32.Zenpak.aiit removal instruction

The Trojan.Win32.Zenpak.aiit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Zenpak.aiit virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Zenpak.aiit?


File Info:
crc32: E05C48B9
md5: e2e59a887b9ac298bee6f06962d72bcb
name: tmpmd3y_16c
sha1: c71f37cb3e0136d59742571677f3430fc4977c01
sha256: b4f32ff1f6a1a6db2497781d64c19868972dbc35be7ff881b63771c96a87a054
sha512: 097c1083c571f399cfafd698a557141f3e5535a25cd912135420fce71dae78d20be49d6e66b1168cf40b2484c04ed4a3a0aee6761a42682cc9e0e1a87aa4ec4c
ssdeep: 6144:4QYmU2JFD8euKJ7lfJy7hcYrDZM8DY8gGTlj:4MU2z8NKJR8rDZM8D5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2009 Free Software Foundation 
InternalName: tmef
FileVersion: 6.4.3.2395
License: This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License; see www.gnu.org/copyleft/gpl.html. 
CompanyName: GnuWin32 
LegalTrademarks: GnuWin32xae, Grepxae, grepxae
WWW: http://www.gnu.org/software/grep/grep.html
ProductName: Tmef
ProductVersion: 6.4.3.2395
FileDescription: Grep: print lines matching a pattern
OriginalFilename: tmef.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Zenpak.aiit also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Trojan.GenericKD.34062139
FireEye	Generic.mg.e2e59a887b9ac298
Qihoo-360	Win32/Trojan.ffa
ALYac	Trojan.GenericKD.34062139
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.34062139
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.b3e013
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34130.mu0@a4H9BGdi
Cyren	W32/Kryptik.BOY.gen!Eldorado
Symantec	Packed.Generic.553
ESET-NOD32	Win64/Dridex.AY
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.aiit
Alibaba	Trojan:Win32/EmotetedCryptc.180910
AegisLab	Trojan.Win32.Malicious.4!c
Ad-Aware	Trojan.GenericKD.34062139
Emsisoft	Trojan.GenericKD.34062139 (B)
TrendMicro	Trojan.Win32.WACATAC.THFBDBO
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
Webroot	W32.Trojan.Gen
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.Zenpak
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D207BF3B
ZoneAlarm	Trojan.Win32.Zenpak.aiit
Microsoft	Trojan:Win32/Dridex.ARJ!MTB
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXAA-AA!E2E59A887B9A
VBA32	TScope.Malware-Cryptor.SB
Malwarebytes	Trojan.Packed
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.WACATAC.THFBDBO
Rising	Trojan.Zenpak!8.10372 (CLOUD)
Yandex	Trojan.Dridex!
Ikarus	Trojan.Win64.Dridex
GData	Trojan.GenericKD.34062139
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Win32.Zenpak.aiit?

Trojan.Win32.Zenpak.aiit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X