Trojan.Win32.Zenpak.bcab malicious file

The Trojan.Win32.Zenpak.bcab is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Zenpak.bcab virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Expresses interest in specific running processes
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Checks the CPU name from registry, possibly for anti-virtualization
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Zenpak.bcab?


File Info:
crc32: BB28B350
md5: 6078130959378ad2a806b663c345b4d8
name: 6078130959378AD2A806B663C345B4D8.mlw
sha1: fd707498a755b7e274fc47d3f17bc2124a3017e0
sha256: 5379f1aa7ee79276603873e8d8915c7de79d0bd352c448f63623abfad3a359f6
sha512: 8f003ac6b942c01443501a790ce2262b8fe2d06094dc2a00742b9012598c7148f71be5d4951cc6a3bd4f7f3fc8419d9169859723912a976012485ef10e7f12c0
ssdeep: 98304:mZCp+vD2+NDDukkAMa5nPQRZldQwyeNlUpLh8H6ynD9j1I7oEKyj3+z2YN0/HIC:mZCmRfEsom8BRa1BY2bOGjmXRwHLHrH
type: PE32 executable (GUI) Intel 80386 system file, for MS Windows, UPX compressed

Version Info:
InternalSurname: debaukd.ekze
Prod: 1.2.7
FileVers: 1.0.5.6
LegalCo: Copyri (C) 2019, permudationzi

Trojan.Win32.Zenpak.bcab also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35922350
McAfee	Artemis!607813095937
Cylance	Unsafe
AegisLab	Trojan.Win32.Malicious.4!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.35922350
K7GW	Riskware ( 0040eff71 )
Arcabit	Trojan.Generic.D22421AE
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HILV
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.bcab
Alibaba	Trojan:Win32/Zenpack.8ebf5147
Avast	Win32:Trojan-gen
Ad-Aware	Trojan.GenericKD.35922350
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.GoCloudnet.cznja
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
FireEye	Generic.mg.6078130959378ad2
Emsisoft	Trojan.GenericKD.35922350 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_93%
Avira	TR/AD.GoCloudnet.cznja
MAX	malware (ai score=83)
Gridinsoft	Trojan.Win32.Kryptik.oa
Microsoft	Trojan:Win32/Zenpack.MU!MTB
ZoneAlarm	Trojan.Win32.Zenpak.bcab
GData	Win32.Trojan.RanumBot.MT95PP
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34700.@pGfa0v!LUh
Malwarebytes	Trojan.MalPack.GS
Fortinet	W32/Kryptik.HGHW!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Panda	Trj/RnkBend.A
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.b39

How to remove Trojan.Win32.Zenpak.bcab?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Zenpak.bcab malicious file