Trojan.Win32.Zenpak.vop removal guide

The Trojan.Win32.Zenpak.vop is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Zenpak.vop virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization
Attempts to modify browser security settings

Related domains:

tj.kpzip.com

sspreport.7654.com

How to determine Trojan.Win32.Zenpak.vop?


File Info:
crc32: AA27DB88
md5: a98bca1dc22426aeacc8549d6e68d90c
name: traytip-25.exe
sha1: 7e24d2ba9e0b11bae4148d5c651c434aebac55fb
sha256: 55dc36db974da4020b783507cb0e2b75debbaaf2bb64a72706bdd253a6b0b5cb
sha512: 0775125610e87a14d799fa6663308ecbb93dbd8712db358379cbb796b459151d75bd787f0f9d2560940ccd661e93018a2f65a01095f134ae262198e7b81e3e1e
ssdeep: 49152:D0TvE7+h0v0hRfgb7cQfZzNSsFsGnUzmX:D0Tantb7lPF/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2010-2020
InternalName: x5c0fx8d34x58eb
FileVersion: 1.0.1.6
ProductName: x5c0fx8d34x58eb
ProductVersion: 1.0.1.6
FileDescription: x5c0fx8d34x58eb
OriginalFilename: x5c0fx8d34x58eb
Translation: 0x0804 0x04b0

Trojan.Win32.Zenpak.vop also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Graftor.702632
McAfee	Artemis!A98BCA1DC224
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Zenpak.4!c
Sangfor	Malware
K7AntiVirus	Adware ( 0055caed1 )
BitDefender	Gen:Variant.Graftor.702632
K7GW	Adware ( 0055caed1 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
GData	Gen:Variant.Graftor.702632
Kaspersky	Trojan.Win32.Zenpak.vop
Alibaba	Backdoor:Win32/KZip.b98e0011
ViRobot	Adware.Graftor.2294848.A
Rising	Adware.AdPop!1.BF3B (CLOUD)
Ad-Aware	Gen:Variant.Graftor.702632
Sophos	Generic PUA HO (PUA)
Comodo	Malware@#2z2v8ddvjpzeu
Zillya	Trojan.Zenpak.Win32.1742
McAfee-GW-Edition	Artemis!PUP
FireEye	Gen:Variant.Graftor.702632
Emsisoft	Gen:Variant.Graftor.702632 (B)
SentinelOne	DFI – Suspicious PE
Cyren	W32/Trojan.GEWK-7015
Jiangmin	Trojan.Zenpak.bfe
Webroot	W32.Adware.Gen
Antiy-AVL	Trojan/Win32.Zenpak
Endgame	malicious (high confidence)
Arcabit	Trojan.Graftor.DAB8A8
ZoneAlarm	Trojan.Win32.Zenpak.vop
Microsoft	Trojan:Win32/Occamy.C
ALYac	Gen:Variant.Graftor.702632
MAX	malware (ai score=83)
VBA32	BScope.Adware.Burden
Malwarebytes	PUP.Optional.Kuaizip
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/KuaiZip.U potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H0CBO20
Tencent	Malware.Win32.Gencirc.10b8f352
MaxSecure	Trojan.Malware.74944533.susgen
Fortinet	Riskware/Zenpak
AVG	Win32:AdwareX-gen [Adw]
Avast	Win32:AdwareX-gen [Adw]

How to remove Trojan.Win32.Zenpak.vop?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Zenpak.vop removal guide