Trojan

Trojan:Win32/Zenpak.ASAB!MTB removal

Malware Removal

The Trojan:Win32/Zenpak.ASAB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Zenpak.ASAB!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Zenpak.ASAB!MTB?


File Info:

name: 710425D0D620D3A9F4AB.mlw
path: /opt/CAPEv2/storage/binaries/0aae3ad42dffe8983788c386a31232ff662769d308a7d33f5d3b3cc242012efd
crc32: 7268DCC4
md5: 710425d0d620d3a9f4ab0fb78623bc58
sha1: e80afac45b277e95b77ba16e8bc0dc26a749a01d
sha256: 0aae3ad42dffe8983788c386a31232ff662769d308a7d33f5d3b3cc242012efd
sha512: 6435055ce3c07ebd871703e988648c3e5a32b75ce414d770d0a1fe9510266d404b423c6a2150438675513bae635cedfe0960c08eb733cc6686538e274f8afbd5
ssdeep: 24576:EO2YI4efnAjWrKAMjFPmKAFSOyKWkuZtlD+zF03hTncc23jHPHxOc//2VZuVSkfT:ECe/S+0ayKXEe03h7pO//29kfwbEr
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T14595012343B7863BD0992C7D2274B396CB7C90831A141AB5AB4135E90F9A4E5F395F3B
sha3_384: 2aa97ae919c897fbcdf1a898cde3bad0a5f9920517b23cdb858ceedc13acf124fc8d016fe941097db670ef8c9cd5524f
ep_bytes: 4083f20389e0508f055c921c10b80700
timestamp: 2011-04-01 08:08:12

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Windows Speech Library
FileVersion: 3.0.6920.1205 (lh_tools_devdiv_wpf_sp1qfe.080214-0334)
InternalName: System.Speech
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: System.Speech.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 3.0.6920.0
Translation: 0x0409 0x04b0

Trojan:Win32/Zenpak.ASAB!MTB also known as:

BkavW32.Common.A3A94566
tehtrisGeneric.Malware
DrWebTrojan.Packed.928
MicroWorld-eScanGen:Variant.Zusy.537111
FireEyeGeneric.mg.710425d0d620d3a9
CAT-QuickHealTrojandownloader.Fero
SkyhighBehavesLike.Win32.Generic.tc
McAfeeArtemis!710425D0D620
MalwarebytesTrojan.Crypt
VIPREGen:Variant.Zusy.537111
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005b1c271 )
AlibabaTrojanDownloader:Win32/Zenpak.ca28d5ca
K7GWTrojan ( 005b1c271 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZedlaF.36802.2v8@aK5NI!ci
SymantecTrojan.Emotet
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HWHA
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R03BC0DBJ24
KasperskyTrojan-Downloader.Win32.Fero.lnu
BitDefenderGen:Variant.Zusy.537111
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Roshtyak-H [Trj]
TencentMalware.Win32.Gencirc.10bfa335
EmsisoftGen:Variant.Zusy.537111 (B)
F-SecureTrojan.TR/AD.Fauppod.uxixp
ZillyaDownloader.Fero.Win32.639
TrendMicroTROJ_GEN.R03BC0DBJ24
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.Krypt
GoogleDetected
AviraTR/AD.Fauppod.uxixp
VaristW32/Kryptik.LOG.gen!Eldorado
Antiy-AVLTrojan[Downloader]/Win32.Fero
MicrosoftTrojan:Win32/Zenpak.ASAB!MTB
ArcabitTrojan.Zusy.D83217
ZoneAlarmTrojan-Downloader.Win32.Fero.lnu
GDataGen:Variant.Zusy.537111
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win.DropperX-gen.R635054
VBA32Malware-Cryptor.Limpopo
ALYacGen:Variant.Zusy.537111
Cylanceunsafe
PandaTrj/GdSda.A
RisingDownloader.Fero!8.18DAE (TFE:2:N67N9Clez0T)
YandexTrojan.DL.Fero!hbMGjhDRb6E
MAXmalware (ai score=81)
MaxSecureTrojan.Malware.233478146.susgen
FortinetW32/Kryptik.HUEI!tr
AVGWin32:Roshtyak-H [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan[downloader]:Win/Zenpak.ASAB!MTB

How to remove Trojan:Win32/Zenpak.ASAB!MTB?

Trojan:Win32/Zenpak.ASAB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment