Trojan

Trojan.Win32.Zenpak.axve removal

Malware Removal

The Trojan.Win32.Zenpak.axve is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.axve virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Trojan.Win32.Zenpak.axve?


File Info:

crc32: 83FF5010
md5: 3823faba1cdda1638b82f718ff0df1b2
name: kv.gif
sha1: 62714b79553efcb01dbbc4300a4c0571398fecc2
sha256: a78ca0fee4255405db1016e87301e606b9ae23539f78e8b05c747144fc4caff5
sha512: 4992123f5aca08e3e18e01a7326f6e1d12c5e1faedf94cdaa6bdee236907cf9645ce92ff50e3c19550c01e9942f2525fe3a48037b066dd32ac73a389cc585042
ssdeep: 6144:qdtJ9rtpMBa7CSqNF2+Nlu/of4jHwr68M:qd1rMBgCSqY+Nloof4Hw2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 Headlight Software, Inc. All rights reserved.
InternalName: AdminPrivSetting.exe
FileVersion: 1.0.6.5
CompanyName: Headlight Software, Inc.
ProductName: (Shared by Headlight Software Products)
ProductVersion: 1.0.6.5
FileDescription: Change Settings that need Admin Privileges
OriginalFilename: AdminPrivSetting.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Zenpak.axve also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
DrWebTrojan.Inject4.3909
MicroWorld-eScanTrojan.GenericKDZ.70967
FireEyeGeneric.mg.3823faba1cdda163
McAfeeW32/PinkSbot-HG!3823FABA1CDD
CylanceUnsafe
SangforMalware
K7AntiVirusSpyware ( 0040f0131 )
BitDefenderTrojan.GenericKDZ.70967
K7GWSpyware ( 0040f0131 )
Cybereasonmalicious.9553ef
BitDefenderThetaGen:NN.ZexaF.34590.py0@aGnHXEei
CyrenW32/Trojan.JJLQ-5636
SymantecPacked.Generic.459
APEXMalicious
AvastWin32:BankerX-gen [Trj]
KasperskyTrojan.Win32.Zenpak.axve
Ad-AwareTrojan.GenericKDZ.70967
F-SecureTrojan.TR/Dropper.Gen
InvinceaML/PE-A
EmsisoftTrojan.Crypt (A)
SentinelOneDFI – Malicious PE
AviraTR/Dropper.Gen
MAXmalware (ai score=85)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
MicrosoftTrojan:Win32/Qakbot.AR!MTB
ArcabitTrojan.Generic.D11537
SUPERAntiSpywareTrojan.Agent/Generic
ZoneAlarmTrojan.Win32.Zenpak.axve
GDataTrojan.GenericKDZ.70967
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Kryptik.R353992
Acronissuspicious
VBA32BScope.Malware-Cryptor.Hlux
ALYacTrojan.GenericKDZ.70967
TACHYONTrojan/W32.Agent.247296.JZ
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/GenKryptik.EVBB
RisingMalware.Obscure/Heur!1.A89E (CLASSIC)
eGambitUnsafe.AI_Score_98%
FortinetW32/GenKryptik.EVBB!tr
AVGWin32:BankerX-gen [Trj]
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360HEUR/QVM20.1.E030.Malware.Gen

How to remove Trojan.Win32.Zenpak.axve?

Trojan.Win32.Zenpak.axve removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment