What is "Trojan:Win32/Zenpak.G!MTB"?

The Trojan:Win32/Zenpak.G!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Zenpak.G!MTB virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Danish
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Zenpak.G!MTB?


File Info:
crc32: 3325613D
md5: 34a036f0793dc8d9f31ae8eaae754af0
name: dxmk.exe
sha1: fd38d03a9a464448a3b6486a8d6811fa9f9f6026
sha256: d7480fdbbab2c28fba14fa4743f1f21ede9cdf4c5f40de1cbf7d8ecfbb5567ab
sha512: aabe5c73ea44b47c1baac4ca4e9faa24ca8edde09936b6e7117217bedad4465aab2b4359eb7590ce7c508ae688cb77e7bb95645d00e76086cbd30d97119e6fca
ssdeep: 3072:SM0y3R/VjOZg8fI6IrJp5x0zAVGw3kh8NvTHo8APh/cTYpdqKaX:ey3JVjOZg0IzJfpRNvTI8jT5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Apple Inc. 1989-2016
InternalName: EcelEeslt
FileVersion: 6.2.
CompanyName: Apple Computer, Inc.
ProductName: EceleEslt
ProductVersion: QuickTime 0.0.0
FileDescription: ApiSet S
OriginalFilename: apisetstub
Translation: 0x0406 0x04b0

Trojan:Win32/Zenpak.G!MTB also known as:

Bkav	HW32.Packed.
DrWeb	Trojan.Dridex.648
MicroWorld-eScan	Trojan.GenericKD.33539272
FireEye	Generic.mg.34a036f0793dc8d9
Qihoo-360	Win32/Trojan.33c
ALYac	Spyware.Banker.Dridex
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005625fa1 )
BitDefender	Trojan.GenericKD.33539272
K7GW	Trojan ( 005625fa1 )
Cybereason	malicious.a9a464
TrendMicro	TrojanSpy.Win32.DRIDEX.TBBT
BitDefenderTheta	Gen:NN.ZexaF.34100.my0@a8mzsAfG
Cyren	W32/Fuerboos.AO.gen!Eldorado
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	Trojan.Win32.Zenpak.wtx
Alibaba	Backdoor:Win32/KZip.8d13ad73
Tencent	Win32.Trojan.Zenpak.Lkds
Ad-Aware	Trojan.GenericKD.33539272
Emsisoft	Trojan.Agent (A)
McAfee-GW-Edition	RDN/Generic.dx
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Banker.Cridex
F-Prot	W32/Fuerboos.AO.gen!Eldorado
Webroot	W32.Malware.Gen
Fortinet	W32/GenKryptik.EGDP!tr
Antiy-AVL	Trojan/Win32.Zenpak
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1FFC4C8
ZoneAlarm	Trojan.Win32.Zenpak.wtx
Microsoft	Trojan:Win32/Zenpak.G!MTB
AhnLab-V3	Malware/Win32.Generic.R328632
Acronis	suspicious
McAfee	Artemis!34A036F0793D
MAX	malware (ai score=81)
Malwarebytes	Trojan.Dridex
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/GenKryptik.EGDP
TrendMicro-HouseCall	TrojanSpy.Win32.DRIDEX.TBBT
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
SentinelOne	DFI – Malicious PE
GData	Trojan.GenericKD.33539272
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.77515329.susgen

How to remove Trojan:Win32/Zenpak.G!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:Win32/Zenpak.G!MTB”?