Trojan

About “Trojan:Win32/Englov.A” infection

Malware Removal

The Trojan:Win32/Englov.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Englov.A virus can do?

  • Executable code extraction
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Created a service that was not started
  • Anomalous binary characteristics

Related domains:

redirector.gvt1.com
r4—sn-4g5ednss.gvt1.com
update.googleapis.com

How to determine Trojan:Win32/Englov.A?


File Info:

crc32: 4F36BB0C
md5: 8baae2b169ae66c588eda38007b34607
name: d740d4594abdfd4f2696b7ddf9656c92.exe
sha1: d659f3c75467700dc1dcbad2fed949442325565b
sha256: f4c694e883037139bca2a01126ed4f1ebcfe74ff8a12ccc0cfd17627dab80742
sha512: 328d98958709c67eaf38f0d0965b214484e5ff9117a2d5dcb84fe01c7750607185d5f85b429beda56f1d06e6a8f6563d6e2a8e3bc2e4d23533771bbcc1724543
ssdeep: 49152:oh7MBK3YzDaijSw1kzQO3DyMh7MBK3YzDaijSw1kzQO3Dy7:DX/vSw1kzQYIX/vSw1kzQYS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Englov.A also known as:

DrWebTrojan.MulDrop5.5320
MicroWorld-eScanTrojan.AgentWDCR.AAWN
CMCTrojan-Dropper.Win32.Flystud!O
CAT-QuickHealTrojan.Hookmoot.S217748
McAfeeBackDoor-DRV.gen.c
CylanceUnsafe
VIPREBackdoor.Win32.FlyAgent.h (v)
SangforMalware
K7AntiVirusTrojan ( 004681261 )
BitDefenderTrojan.AgentWDCR.AAWN
K7GWTrojan ( 004681261 )
Cybereasonmalicious.169ae6
ArcabitTrojan.AgentWDCR.AAWN
TrendMicroMal_OtorunN
BitDefenderThetaGen:NN.ZexaCO.34122.gwZ@aKY6ZBhb
F-ProtW32/Agent.CM.gen!Eldorado
SymantecTrojan.Dropper
ESET-NOD32Win32/FlyStudio.A
TrendMicro-HouseCallMal_OtorunN
Paloaltogeneric.ml
ClamAVWin.Malware.Vjadtre-6840658-0
KasperskyTrojan.Win32.Agent.xadlaj
AlibabaWorm:Win32/OnLineGames.0fb5cea1
NANO-AntivirusTrojan.Win32.OnLineGames.fpapzu
AvastWin32:Tiny-AGM [PUP]
RisingStealer.QQpass!1.648F (KTSE)
Ad-AwareTrojan.AgentWDCR.AAWN
EmsisoftApplication.Generic (A)
ComodoTrojWare.Win32.TrojanDropper.Agent.HNMS@4xnjpy
F-SecureTrojan:W32/Agent.DQOD
BaiduWin32.Worm.FlyStudio.mc
ZillyaDropper.Flystud.Win32.139
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.HLLP.vc
FortinetW32/OnlineGames.A!tr
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.8baae2b169ae66c5
SophosMal/Behav-043
IkarusRootkit.Win32.Tiny
CyrenW32/Agent.CM.gen!Eldorado
JiangminTrojan/Win32.Agent.l
WebrootW32.Orsam.Gen
AviraRKIT/Hookmoot.A
MAXmalware (ai score=88)
Antiy-AVLTrojan[GameThief]/Win32.OnLineGames.boif
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Englov.A
ZoneAlarmTrojan.Win32.Agent.xadlaj
AhnLab-V3HEUR/Fakon.mwf.X1381
Acronissuspicious
VBA32BScope.Worm.FlyStudio
ALYacTrojan.AgentWDCR.AAWN
TACHYONTrojan-PWS/W32.WebGame.2200194
MalwarebytesTrojan.FlyStudio
APEXMalicious
TencentTrojan.TenThief.QQPsw.tss
YandexWorm.Autorun!1DOkY6YfgQ8
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
GDataWin32.Trojan.FlyStudio.A
MaxSecureTrojan.Autorun.DM
AVGWin32:Tiny-AGM [PUP]
PandaTrj/WLT.F
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.BO.fe0

How to remove Trojan:Win32/Englov.A?

Trojan:Win32/Englov.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment