Trojan:Win32/Aenjaris!pz removal instruction

The Trojan:Win32/Aenjaris!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Aenjaris!pz virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Anomalous binary characteristics

How to determine Trojan:Win32/Aenjaris!pz?


File Info:
name: 9AF8845B6049455B3171.mlw
path: /opt/CAPEv2/storage/binaries/d723d1639252cce32cc2f6c403d76377228bc5822b984db9bda4816d5c9405ff
crc32: 3ED7288C
md5: 9af8845b6049455b31711598c565a408
sha1: 6a5aa9e717d63b4f09ab52fadbeb3288e3b5effb
sha256: d723d1639252cce32cc2f6c403d76377228bc5822b984db9bda4816d5c9405ff
sha512: ded0c31a7bfdfe04eceebfec7d774ffa0b110e5dc1452aed09d84987b0e2e0fb42e314a1759d50df80cd91f37803e6b942216ceb9b1dc075fe9424ea8c9a6167
ssdeep: 6144:8loiWFujTa9cNBWwBT1wQRYiLounKMWPTPpP8vhndkEjiPISUOgW9X+hOGzC/:82Y/YiuMcodkmZzcukG2/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T116548C0672844773D0A313B82DDB99D56F3ABD757371C6A32848763F22B2A7486B3391
sha3_384: 6d4a1256ea9aa04dc5aadf3105cfc3131f074de75782ebeb0591f1c77004180718de1106b305929c045519b9835e3392
ep_bytes: 60bf000000008aa70010400080f48688
timestamp: 2007-06-02 06:27:43

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: AdwTest.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: AdwTest.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Trojan:Win32/Aenjaris!pz also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.Babuk.69
ClamAV	Win.Malware.Razy-9759519-0
FireEye	Generic.mg.9af8845b6049455b
Skyhigh	BehavesLike.Win32.Generic.dh
McAfee	GenericRXOB-DF!9AF8845B6049
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005ac2dd1 )
K7GW	Trojan ( 004b494b1 )
Cybereason	malicious.717d63
BitDefenderTheta	Gen:NN.ZexaF.36744.ru3@aqyzW2ki
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Agent.WTK
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.antno
BitDefender	Gen:Variant.Ransom.Babuk.69
NANO-Antivirus	Trojan.Win32.Mlw.fhzfym
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:TrojanX-gen [Trj]
Sophos	Mal/Agent-AWE
F-Secure	Heuristic.HEUR/AGEN.1365067
DrWeb	Trojan.MulDrop5.42246
Zillya	Trojan.AgentGen.Win32.95
Emsisoft	Gen:Variant.Ransom.Babuk.69 (B)
Ikarus	Trojan.Win32.Aenjaris
GData	Win32.Trojan.BadJoke.J
Google	Detected
Avira	HEUR/AGEN.1365067
Antiy-AVL	Trojan/Win32.Agent.wtk
Kingsoft	malware.kb.a.990
Xcitium	TrojWare.Win32.Aenjaris.ABC@8hq1l4
Arcabit	Trojan.Ransom.Babuk.69
ZoneAlarm	HEUR:Trojan.Win32.Nobady.pef
Microsoft	Trojan:Win32/Aenjaris!pz
Varist	W32/Agent.FRS.gen!Eldorado
AhnLab-V3	Malware/Win.Generic.C5393361
VBA32	SScope.Malware-Cryptor.Aenjaris
ALYac	Gen:Variant.Ransom.Babuk.69
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Agent!1.A728 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.WTK!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan:Win32/Aenjaris!pz?

Trojan:Win32/Aenjaris!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X