Trojan

Trojan.Win32.Zenpak.axoc removal

Malware Removal

The Trojan.Win32.Zenpak.axoc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.axoc virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process created a hidden window
  • Drops a binary and executes it
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • A system process is generating network traffic likely as a result of process injection
  • Installs itself for autorun at Windows startup
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

www.ip-adress.com

How to determine Trojan.Win32.Zenpak.axoc?


File Info:

crc32: D87686BA
md5: e2d408ec09d59ae8e6260ebd9e983578
name: upload_file
sha1: f0613c51f686d4122ba2886f6a11123bb4862c7f
sha256: f6efbeaf13589f87601ea449c53010c0ece3ddaf48934169e88a211d3988f8f8
sha512: e18fb2f8d2ba987030ed9015fe52fdaac4093c0846800e83031d4fcc50a3cfaf2e12e6130bba78d1a7945e22ab5367df44c3af441e5bf3714cd15eeec26937ad
ssdeep: 6144:WXfc7Dv1eK98DlbZ0LiHlymkJofZclWsr7RYWxi/1:Wk7DNeK9y8LiFyVlWsrdZxid
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Zenpak.axoc also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.QakBot.11
MicroWorld-eScanGen:Heur.Mint.SP.Azorult.1
FireEyeGeneric.mg.e2d408ec09d59ae8
McAfeeGenericRXAA-FA!E2D408EC09D5
CylanceUnsafe
SangforMalware
BitDefenderGen:Heur.Mint.SP.Azorult.1
Cybereasonmalicious.c09d59
BitDefenderThetaGen:NN.ZexaF.34570.qmW@aW5B@Gf
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyTrojan.Win32.Zenpak.axoc
RisingTrojan.Crypto!8.364 (TFE:2:lGpISJAuUHN)
Ad-AwareGen:Heur.Mint.SP.Azorult.1
InvinceaML/PE-A
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
AviraTR/Dropper.Gen
MAXmalware (ai score=80)
MicrosoftTrojan:Win32/QakBot.GM!MTB
ArcabitTrojan.Mint.SP.Azorult.1
ZoneAlarmTrojan.Win32.Zenpak.axoc
GDataGen:Heur.Mint.SP.Azorult.1
ALYacGen:Heur.Mint.SP.Azorult.1
VBA32Malware-Cryptor.Bambarbiya
PandaTrj/Agent.AJS
ESET-NOD32a variant of Win32/GenKryptik.EURT
SentinelOneDFI – Malicious PE
FortinetW32/Kryptik.HGXH!tr
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360HEUR/QVM20.1.BBD6.Malware.Gen

How to remove Trojan.Win32.Zenpak.axoc?

Trojan.Win32.Zenpak.axoc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment