About “Trojan:Win32/Vebzenpak.C!MTB” infection

The Trojan:Win32/Vebzenpak.C!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Vebzenpak.C!MTB virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Vebzenpak.C!MTB?


File Info:
crc32: F63E7BA9
md5: 0de98ccdaa68c620f605445766cfef6e
name: upload_file
sha1: d47228c6f1a2942b5c769e012cf73b3e41d0a591
sha256: 275fcda533f778216eddd1bb4eb255c5feea615298d1f3255099ae3a833200f3
sha512: ffd7cacb953efb92c82e18aad2a34c544e99770b8fc345e3f9392b11945c2e950303c51d1ce6cc7fe038228f2e4aaae89f0094b27c55f13a3f1557e93534c33e
ssdeep: 384:dvnDsDNBBGMAoD21t6UxSx8FIjQ1ooymjfGMyIXrYp5S4MJibRU:dvnGNThSiUxSx8FiRoymjfUtMMbR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright:     
InternalName: NEDST
FileVersion: 1.00
CompanyName: marga
Comments: BEST
ProductName: stri
ProductVersion: 1.00
FileDescription: FASC
OriginalFilename: NEDST.exe

Trojan:Win32/Vebzenpak.C!MTB also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKD.34335950
FireEye	Generic.mg.0de98ccdaa68c620
CAT-QuickHeal	Trojan.Vebzenpak
Qihoo-360	Win32/Trojan.f88
McAfee	Trojan-FSRH!0DE98CCDAA68
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0056c3611 )
BitDefender	Trojan.GenericKD.34335950
K7GW	Trojan ( 0056c3611 )
TrendMicro	TROJ_GEN.R002C0WHB20
BitDefenderTheta	Gen:NN.ZevbaF.34186.cm0@aWyHGuni
Cyren	W32/Trojan.TYRA-5679
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Injector.EMYX
TrendMicro-HouseCall	TROJ_GEN.R002C0WHB20
Avast	Win32:DropperX-gen [Drp]
Kaspersky	Trojan.Win32.Vebzenpak.yyb
Alibaba	Trojan:Win32/Vebzenpak.5622d689
NANO-Antivirus	Trojan.Win32.Vebzenpak.hrnlxw
ViRobot	Trojan.Win32.Z.Wacatac.36864.AR
Rising	Trojan.Injector!1.CA65 (CLASSIC)
Ad-Aware	Trojan.GenericKD.34335950
Comodo	TrojWare.Win32.Agent.vmttk@0
F-Secure	Trojan.TR/AD.VBCryptor.edpxh
Zillya	Trojan.Vebzenpak.Win32.4014
Sophos	Mal/Generic-S
APEX	Malicious
Jiangmin	Trojan.Vebzenpak.hhr
Avira	TR/AD.VBCryptor.edpxh
Fortinet	W32/Guloader.VHJK!tr
Antiy-AVL	Trojan/Win32.Injector
Arcabit	Trojan.Generic.D20BECCE
ZoneAlarm	Trojan.Win32.Vebzenpak.yyb
Microsoft	Trojan:Win32/Vebzenpak.C!MTB
Cynet	Malicious (score: 85)
VBA32	TScope.Trojan.VB
ALYac	Trojan.GenericKD.34335950
MAX	malware (ai score=81)
Malwarebytes	Trojan.MalPack.VB
Ikarus	Trojan.Win32.Krypt
Panda	Trj/GdSda.A
Tencent	Win32.Trojan.Vebzenpak.Kgf
GData	Trojan.GenericKD.34335950
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.104895274.susgen

How to remove Trojan:Win32/Vebzenpak.C!MTB?

Trojan:Win32/Vebzenpak.C!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X