Trojan

Should I remove “Trojan.Win32.Zenpak.aoqp”?

Malware Removal

The Trojan.Win32.Zenpak.aoqp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.aoqp virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Zenpak.aoqp?


File Info:

crc32: DA3587D9
md5: e74d18039283fcc5c592ba7d9c115d21
name: upload_file
sha1: 398031d10e628aa0836843de45537dcc7ce118b0
sha256: 9abcb7664c40bfdbb38a91e026705bcd47faa22c536d6d727c8bb5f744a86a12
sha512: 5ed1f7dd8cec2aa1a015bf7d304abf2daa0f5552c9d41db892cc9f0e700bd0602a98ceb06124b812e7992b7250699c0224b041c603f6faf344e585283a78e274
ssdeep: 6144:T4p06YZxFrAfp9NlOvTULvRf71SWZsYM+VX+bUOGcLZo3nU:UxYL2fpsvUfhxvVX+9Z0U
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2002
InternalName: NetBIOS Enumerater
FileVersion: 1, 0, 1, 2
CompanyName: Camelott GmbH
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: Camelott GmbH NetBIOS Enumerater
SpecialBuild:
ProductVersion: 1, 0, 1, 2
FileDescription: NetBIOS Enumerater
OriginalFilename: NetBIOS Enumerater.exe
Translation: 0x0407 0x04b0

Trojan.Win32.Zenpak.aoqp also known as:

MicroWorld-eScanTrojan.GenericKD.34201145
FireEyeGeneric.mg.e74d18039283fcc5
CAT-QuickHealTrojan.IGENERIC
McAfeeGenericRXAA-AA!E74D18039283
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 0056ae9f1 )
BitDefenderTrojan.GenericKD.34201145
K7GWTrojan ( 0056ae9f1 )
CrowdStrikewin/malicious_confidence_90% (W)
TrendMicroTROJ_GEN.R002C0DHC20
F-ProtW32/Kryptik.BQQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Zenpak.aoqp
AlibabaBackdoor:Win32/Trickbot.a48b7d66
NANO-AntivirusTrojan.Win32.Zenpak.horwtu
ViRobotTrojan.Win32.Z.Zenpak.518416
RisingTrojan.Kryptik!1.C80B (CLOUD)
Ad-AwareTrojan.GenericKD.34201145
F-SecureTrojan.TR/AD.TrickBot.dbiii
DrWebTrojan.Packed.140
VIPRETrojan.Win32.Generic!BT
Invinceaheuristic
FortinetW32/Zenpak.APEI!tr
SophosMal/Generic-S
IkarusTrojan-Banker.TrickBot
CyrenW32/Kryptik.BQQ.gen!Eldorado
JiangminTrojan.Zenpak.cte
AviraTR/AD.TrickBot.dbiii
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.Zenpak
ArcabitTrojan.Generic.D209DE39
MicrosoftTrojan:Win32/Trickbot.MX!MTB
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.Trickbot.C4166494
ALYacTrojan.GenericKD.34201145
VBA32BScope.Backdoor.Emotet
MalwarebytesTrojan.MalPack
ESET-NOD32Win32/TrickBot.DI
TrendMicro-HouseCallTROJ_GEN.R002C0DHC20
TencentWin32.Trojan.Zenpak.Ajll
SentinelOneDFI – Malicious PE
GDataTrojan.GenericKD.34201145
AVGWin32:Malware-gen
MaxSecureTrojan.Malware.104190195.susgen

How to remove Trojan.Win32.Zenpak.aoqp?

Trojan.Win32.Zenpak.aoqp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment