Trojan

About “Trojan.Win32.Zenpak.appm” infection

Malware Removal

The Trojan.Win32.Zenpak.appm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.appm virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Zenpak.appm?


File Info:

crc32: FAEB0B50
md5: 0edaaea0b85ff77fc836cf1e5978b4ce
name: 0EDAAEA0B85FF77FC836CF1E5978B4CE.mlw
sha1: d9d5b8344e2b3ea418625f0afccedda2dc42e9b8
sha256: c3c69b80455b9ee900903db5d04f542c9b66af4598e513d0d525ff19a07d3b76
sha512: a0845b58e9541d004432d43d6d23aa7d7cb5b7fdecffe0417df59181dba8a1218cac0eb4c0e06c9d7e6d123efeb1e232e49f62b803d5ea2720dd8331663f01e5
ssdeep: 12288:cRM7DOIRwUVM+o9yaS85uKGdnvf8jeTGk9MDonQl1GupY/5mYWp8DMUmDnnr6I5:v5RwUVho9yv8Wnvf8jeTGk9MDDl65md
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709(C) 2016-2018 UncleFreak.
InternalName: PuTTY
FileVersion: x53d1x5e03x7248 1.0v
CompanyName: Simon Tatham
ProductName: PuTTY x5957x4ef6
ProductVersion: x53d1x5e03x7248 1.0v
FileDescription: SSHx3001Telnet x548c Rlogin x5ba2x6237x7aef
OriginalFilename: PuTTY
Translation: 0x0804 0x04b0

Trojan.Win32.Zenpak.appm also known as:

BkavW32.AIDetectVM.malware2
DrWebBackDoor.DaVinci.97
CylanceUnsafe
ZillyaTrojan.Cometer.Win32.320
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaBackdoor:Win32/KZip.2cd76f45
Cybereasonmalicious.44e2b3
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyTrojan.Win32.Zenpak.appm
NANO-AntivirusTrojan.Win32.Cometer.epuqgs
F-SecureTrojan.TR/Rozena.zuaav
VIPRETrojan.Win32.Generic!BT
JiangminTrojan.Zenpak.cot
WebrootW32.Malware.Gen
AviraTR/Rozena.zuaav
ZoneAlarmTrojan.Win32.Zenpak.appm
McAfeeMalformed-PuTTY!0EDAAEA0B85F
MAXmalware (ai score=95)
VBA32Backdoor.DaVinci
YandexBackDoor.DaVinci!
IkarusTrojan.Rozena
MaxSecureTrojan.Malware.7164915.susgen

How to remove Trojan.Win32.Zenpak.appm?

Trojan.Win32.Zenpak.appm removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment