Trojan

Should I remove “Trojan.Win32.Zenpak.ayf”?

Malware Removal

The Trojan.Win32.Zenpak.ayf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.ayf virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system

Related domains:

loqiworou7213.icu

How to determine Trojan.Win32.Zenpak.ayf?


File Info:

crc32: 6CF5BE42
md5: 1f64be3564bffab42f212a049b4c7564
name: 1F64BE3564BFFAB42F212A049B4C7564.mlw
sha1: c670fa7805079849843ff0b7fcbe87790fa787fd
sha256: c54f61ef8558aa852ed1684f5e5bcd9234f36cc4d5d166fa09f782325b16001d
sha512: 33b8e4b9d49ea3bf73bce3893f8231587acaeaa207a5b2d23f8d18a9934a1cbb424aca50488c5a3b8ae93f63ed08f8c93612969a31f7ea898219a7c9c9da09b8
ssdeep: 12288:lxJLp1alA8eta8807pX7DRqavMpoJbZraS+6:lnL+5u7pXfEOJbZGx6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9Lohika Systems. All rights reserved.
InternalName: Converter
CompanyName: Lohika Systems
FileDescription: Chsh Inadequacies Datatypes
LegalTrademarks: Copyright xa9Lohika Systems. All rights reserved.
Comments: Chsh Inadequacies Datatypes
ProductName: Converter
ProductVersion: 8.2.3.2
PrivateBuild: 8.2.3.2
OriginalFilename: Converter.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Zenpak.ayf also known as:

K7AntiVirusPassword-Stealer ( 0052f96e1 )
LionicTrojan.Win32.Zenpak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.24943
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.31325936
CylanceUnsafe
ZillyaTrojan.Zenpak.Win32.304
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaTrojanPSW:Win32/Zenpak.69e0f7f8
K7GWPassword-Stealer ( 0052f96e1 )
Cybereasonmalicious.564bff
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/PSW.Delf.OSF
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Zenpak.ayf
BitDefenderTrojan.GenericKD.31325936
NANO-AntivirusTrojan.Win32.Stealer.fjyekx
MicroWorld-eScanTrojan.GenericKD.31325936
TencentWin32.Trojan.Zenpak.Eaxo
Ad-AwareTrojan.GenericKD.31325936
SophosMal/Generic-S
ComodoMalware@#2dbtcqe71zg0l
BitDefenderThetaGen:NN.ZexaE.34058.Nq0@a4MKRJpi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGeneric.dzm
FireEyeGeneric.mg.1f64be3564bffab4
EmsisoftTrojan.GenericKD.31325936 (B)
WebrootW32.Trojan.GenKD
AviraHEUR/AGEN.1117382
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.28C4E45
MicrosoftTrojan:Win32/Occamy.CC5
ZoneAlarmTrojan.Win32.Zenpak.ayf
GDataTrojan.GenericKD.31325936
AhnLab-V3Malware/Win32.Generic.C2803458
Acronissuspicious
McAfeeGeneric.dzm
VBA32Trojan.Zenpak
PandaTrj/CI.A
YandexTrojan.Zenpak!SyZ00FDaHZg
IkarusTrojan-Spy.Remcos
FortinetW32/Crysis.P!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Zenpak.HgIASOgA

How to remove Trojan.Win32.Zenpak.ayf?

Trojan.Win32.Zenpak.ayf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment