Should I remove “Trojan:Win32/Aenjaris!pz”?

The Trojan:Win32/Aenjaris!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Aenjaris!pz virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Anomalous binary characteristics

How to determine Trojan:Win32/Aenjaris!pz?


File Info:
name: 4173B730F5A94A8E4F1E.mlw
path: /opt/CAPEv2/storage/binaries/96f4322cc010af02fa6756c9a08731d8a483b36dd0034c248a06d82b18c39904
crc32: 607C098B
md5: 4173b730f5a94a8e4f1ee17ea265905e
sha1: dc14d1f68d8171fa8ef28c8cb4861c01d2bcdde9
sha256: 96f4322cc010af02fa6756c9a08731d8a483b36dd0034c248a06d82b18c39904
sha512: 28f8f9ccf22655024e4ec45749514ffc368a13af03829156c02268c2d238de8023738c8ba3bc787adfa19b16173edcc0ce27126aeb85e98237cb5ce40da29c78
ssdeep: 6144:rrYTgEMnRNL+I3YHBb/vMYRbbdfHKQkEjiPISUOgW9X+hOGzC/NM:vBrIdU8IQkmZzcukG2/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108A48F48FD599A53E1630135658BE5906379B8B1F7AAC1273058B32F12B376039BAF3C
sha3_384: 8d54b203f206824aef4ada4684b0bd703ee8c61a124551ad892febc1c24fe889e6fb1572bb0032718358b09d2b2bc016
ep_bytes: 60b9000000008ab900104000c0cf1dc0
timestamp: 2007-06-02 06:27:43

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: AdwTest.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: AdwTest.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Trojan:Win32/Aenjaris!pz also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Ransom.Babuk.86
ClamAV	Win.Malware.Razy-9759519-0
FireEye	Generic.mg.4173b730f5a94a8e
CAT-QuickHeal	Trojan.Generic.20764
Skyhigh	BehavesLike.Win32.Generic.gm
McAfee	GenericRXOB-DF!4173B730F5A9
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.AgentGen.Win32.95
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005ac2dd1 )
K7GW	Trojan ( 004b494b1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.MulDrop5.CKMW
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.WTK
Zoner	Trojan.Win32.31723
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Nobady.pef
BitDefender	Gen:Variant.Ransom.Babuk.86
NANO-Antivirus	Trojan.Win32.Drop.dntana
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Agent.zl
Sophos	Mal/Agent-AWE
F-Secure	Heuristic.HEUR/AGEN.1365521
DrWeb	Trojan.MulDrop5.42246
VIPRE	Gen:Variant.Ransom.Babuk.86
TrendMicro	TROJ_GEN.R03BC0DB924
Emsisoft	Gen:Variant.Ransom.Babuk.86 (B)
Ikarus	Trojan.Win32.Aenjaris
GData	Win32.Trojan.BadJoke.J
Google	Detected
Avira	HEUR/AGEN.1365521
Antiy-AVL	Trojan/Win32.Agent.wtk
Kingsoft	malware.kb.a.837
Xcitium	TrojWare.Win32.Aenjaris.ABC@8hq1l4
Arcabit	Trojan.Ransom.Babuk.86
ZoneAlarm	HEUR:Trojan.Win32.Nobady.pef
Microsoft	Trojan:Win32/Aenjaris!pz
Varist	W32/Agent.FRS.gen!Eldorado
AhnLab-V3	Malware/Win.Generic.C5393361
BitDefenderTheta	Gen:NN.ZexaF.36744.Cu3@aqyzW2ki
ALYac	Gen:Variant.Ransom.Babuk.86
TACHYON	Trojan/W32.Agent.458752.AIB
VBA32	SScope.Malware-Cryptor.Aenjaris
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0DB924
Rising	Trojan.Agent!1.A728 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.WTK!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.68d817
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Aenjaris!pz?

Trojan:Win32/Aenjaris!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X