About “Mal/EncPk-AOT” infection

The Mal/EncPk-AOT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/EncPk-AOT virus can do?

• Unconventionial language used in binary resources: Hebrew
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Mal/EncPk-AOT?

File Info:
name: 537F680D6501C3D9DAB8.mlw
path: /opt/CAPEv2/storage/binaries/089ddac04a53c022294268cd8d1bd06793bf023ac6f3db478c54f4cf73d9045e
crc32: 87F5EA6A
md5: 537f680d6501c3d9dab8e95f93f2e8ea
sha1: 92992b576676432ac7fdb65ec1b17fa0e3ae3a3f
sha256: 089ddac04a53c022294268cd8d1bd06793bf023ac6f3db478c54f4cf73d9045e
sha512: 719c873778a68c024f93210a1b0a65cd3188d36c07edb9c873219c3998724aa91164ac79398e85836d3ec4f923b9e84d9333ac9dad32e9384ab7d8d641feb53e
ssdeep: 196608:CdQaHc2cJgKaza5Sy/sRbS69Kews9KMul3375KjyrrI1/wKjyrsKP/m:qQx2ta5SbD9KZs9Yl3rha/SF/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10FC62335E7A1D03AC1731CB1CEF680ABE56C7C32372DD8CB16C56B491A616C4A93276B
sha3_384: 296892970e045be1bd2202625896441f70b28ba6afedcf9d4aa89b3a651ece001c6b1450a15a4d46a06dac6df69884cf
ep_bytes: 3682b70fb221acc5ea9c7f4903b609b4
timestamp: 2010-08-23 19:52:34

Version Info:
FileDescription: fcportables.blogspot.com
FileVersion: 2011
InternalName: Loader
LegalCopyright: Copyright (C) 2010
OriginalFilename: Loader.exe
ProductName: Loader Application
ProductVersion: 1, 40, 198, 0
Translation: 0x0409 0x04b0

Mal/EncPk-AOT also known as:

How to remove Mal/EncPk-AOT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.