Trojan

How to remove “Trojan.Win32.Zenpak.bepb”?

Malware Removal

The Trojan.Win32.Zenpak.bepb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Zenpak.bepb virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Serbian
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Win32.Zenpak.bepb?


File Info:

crc32: A1294FCF
md5: 95f733cc09d31c81ea022528b25e1aa0
name: 95F733CC09D31C81EA022528B25E1AA0.mlw
sha1: e6c928a8160237a5847af836cd16fac6e5e83bfa
sha256: 13e47f17dd6d83e44f9dedb7170f9f3aaedc3497a8ac97025962787f3f922155
sha512: 31e7e2a6bb233b7d478b1f6cd54cc7d31c49f2f94fdfcb86d11e797c25d89eaf554ea163c26fd56307cf1c6ab8408cefe9f381202d9185c6105898b1f0045520
ssdeep: 6144:gRFDrgtxF7x9tqq+Mi88yIfLghDYn6yfMeUbvegPzl/Y:uFD8HF7ztqq+EEfMhDMPfavemzl/
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

InternalName: triwilbifor.occ
FileVersion: 6.26.341
Copyright: Copyrighz (C) 2020, wodkagudy
ProductVersion: 1.13.21
TranslationUsa: 0x0173 0x00e1

Trojan.Win32.Zenpak.bepb also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45484246
CAT-QuickHealTrojan.Multi
ALYacTrojan.GenericKD.45484246
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 005763961 )
BitDefenderTrojan.GenericKD.45484246
K7GWTrojan ( 005763961 )
ArcabitTrojan.Generic.D2B608D6
CyrenW32/Kryptik.CXK.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Packed.Fugrafa-9821776-0
KasperskyTrojan.Win32.Zenpak.bepb
AlibabaBackdoor:Win32/Azorult.8f31f857
ViRobotTrojan.Win32.Z.Kryptik.321536.GA
TencentWin32.Trojan.Zenpak.Hwct
Ad-AwareTrojan.GenericKD.45484246
EmsisoftTrojan.Crypt (A)
ComodoMalware@#l3fm35petiob
F-SecureTrojan.TR/Crypt.Agent.yzjza
DrWebTrojan.DownLoader36.35481
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojan.Win32.MALREP.THAAEBA
McAfee-GW-EditionBehavesLike.Win32.RansomGandCrab.fc
FireEyeGeneric.mg.95f733cc09d31c81
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
AviraTR/Crypt.Agent.yzjza
MAXmalware (ai score=81)
KingsoftWin32.Troj.Generic_a.a.(kcloud)
GridinsoftTrojan.Win32.Packed.oa
MicrosoftTrojan:Win32/Azorult.MT!MTB
ZoneAlarmTrojan.Win32.Zenpak.bepb
GDataTrojan.GenericKD.45484246
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C4302280
McAfeeGenericRXAA-AA!95F733CC09D3
VBA32BScope.Trojan.Zenpack
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HIVK
TrendMicro-HouseCallTrojan.Win32.MALREP.THAAEBA
RisingTrojan.Kryptik!1.D164 (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.HIRY!tr
BitDefenderThetaGen:NN.ZexaF.34760.tmKfa492qqgG
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Generic/HEUR/QVM11.1.A8DA.Malware.Gen

How to remove Trojan.Win32.Zenpak.bepb?

Trojan.Win32.Zenpak.bepb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment