Trojan:Win32/Aenjaris!pz removal tips

The Trojan:Win32/Aenjaris!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Aenjaris!pz virus can do?

• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• CAPE detected the shellcode get eip malware family
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Aenjaris!pz?

File Info:
name: D285EB83738B1796CA20.mlw
path: /opt/CAPEv2/storage/binaries/265aaaaff23e8d9c40f237e02da39868ee28433b06f539d564fc0c81c028bb11
crc32: F20BFFE3
md5: d285eb83738b1796ca20e99acb170022
sha1: 8482ea27c0d8f028f2e9ac15c6496376c156c0b6
sha256: 265aaaaff23e8d9c40f237e02da39868ee28433b06f539d564fc0c81c028bb11
sha512: d5497673a8133652b1aa84baa939196e3b2432d22c766b1484de4db3943bc11fc5a9b960f03898fd160ad65f691a94617afc32026d80a218d6f77d9e1deee4c9
ssdeep: 6144:+guMYqgvOv790IEuuLEoZkEjiPISUOgW9X+hOGzC/:ZuMYVvO50QuLEoZkmZzcukG2/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193548E1B72CAC3B3D19203B119DBC5D93B36FCB167B582162AA4B21D4633FE40676369
sha3_384: e6d65223b0e4f31701472795ce8ba6a0fc137fdd38a44b8c85921337e32232000850013d1c3acd5ac1d311a2aaf9d3e3
ep_bytes: 60b99c3102008ab1ff0f400080ee7e80
timestamp: 2007-06-02 06:27:43

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: AdwTest.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: AdwTest.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Trojan:Win32/Aenjaris!pz also known as:

How to remove Trojan:Win32/Aenjaris!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.