Trojan.Win32.Zenpak.axyi information

The Trojan.Win32.Zenpak.axyi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Zenpak.axyi virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process created a hidden window
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Zenpak.axyi?


File Info:
crc32: AF1AFCA9
md5: 41cacd143a7c25cfeb579a5337bf536c
name: kv.gif
sha1: 16ae3431d1d4dd9a83c0e19ddbba44d7c1fda807
sha256: 1594eecdf109737e1c272a2f21135aa92f1fc136d659a04e10377f6f0714a7f7
sha512: 3a919f93b3b75364b7f088151aaadbb0abe7eee22c17bb325776f37cd018bf9b8d933e763bfedc09ee69394766820fb136c7fd6bc659b5dade3adc3847d1a392
ssdeep: 6144:TdtJ9rtpMBa7CSqNF2+Nlu/of4jHwr68M:Td1rMBgCSqY+Nloof4Hw2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Headlight Software, Inc.  All rights reserved.
InternalName: AdminPrivSetting.exe
FileVersion: 1.0.6.5
CompanyName: Headlight Software, Inc.
ProductName: (Shared by Headlight Software Products)
ProductVersion: 1.0.6.5
FileDescription: Change Settings that need Admin Privileges
OriginalFilename: AdminPrivSetting.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Zenpak.axyi also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44210910
FireEye	Generic.mg.41cacd143a7c25cf
McAfee	W32/PinkSbot-HG!41CACD143A7C
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Trojan.GenericKD.44210910
K7GW	Spyware ( 0040f0131 )
Cybereason	malicious.1d1d4d
Symantec	Packed.Generic.459
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Kaspersky	Trojan.Win32.Zenpak.axyi
Alibaba	Trojan:Win32/Kryptik.136a2af5
AegisLab	Hacktool.Win32.Krap.lKMc
Rising	Dropper.Generic!8.35E (TFE:4:BPwqqbSZLiT)
Ad-Aware	Trojan.GenericKD.44210910
DrWeb	Trojan.Inject4.3925
Invincea	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
Sophos	Mal/Generic-S
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Qakbot.AR!MTB
Arcabit	Trojan.Generic.D2A29ADE
SUPERAntiSpyware	Trojan.Agent/Generic
ZoneAlarm	Trojan.Win32.Zenpak.axyi
GData	Trojan.GenericKD.44210910
TACHYON	Trojan/W32.Agent.248320.JS
AhnLab-V3	Trojan/Win32.Wacatac.R353991
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34590.py0@a0uWZzki
ALYac	Trojan.GenericKD.44210910
MAX	malware (ai score=87)
VBA32	BScope.Malware-Cryptor.Hlux
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HGZZ
Tencent	Win32.Trojan.Zenpak.Pcsw
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.HGZZ!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.986

How to remove Trojan.Win32.Zenpak.axyi?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Zenpak.axyi information