Malware

How to remove “Win32/Injector.Autoit.ENM”?

Malware Removal

The Win32/Injector.Autoit.ENM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.Autoit.ENM virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Win32/Injector.Autoit.ENM?


File Info:

crc32: 28FE4234
md5: 2c9f626447ae964cea8cc43daf078e70
name: smes.exe
sha1: e6f9fed713f822348c289ab37e1e559f6738865e
sha256: 1650fa7dfd5cc553776b130e27195d407ab18a356773e0c4b471102764ef25dd
sha512: 65ccfa2a7ad4167aa157ece29906411dc2a4dd45027520e89f1a29c3a4ef6315b404c8ecf3a54f7b7ab348635b813f0a96f762ba2633d4499f9a56eb53978449
ssdeep: 24576:Xu6J33O0c+JY5UZ+XC0kGso6Fa1BNv36j/5n8WY:xu0c++OCvkGs9Fa1eTBY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Win32/Injector.Autoit.ENM also known as:

MicroWorld-eScanTrojan.GenericKD.32682458
FireEyeGeneric.mg.2c9f626447ae964c
ALYacTrojan.GenericKD.32682458
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusTrojan ( 0055ae4f1 )
BitDefenderTrojan.GenericKD.32682458
K7GWTrojan ( 0055ae4f1 )
Invinceaheuristic
CyrenW32/Trojan.EBVU-1536
SymantecPacked.Generic.548
TrendMicro-HouseCallTROJ_GEN.R002C0PK619
GDataTrojan.GenericKD.32682458
KasperskyTrojan.Win32.Bsymem.mje
AlibabaTrojan:Win32/Bsymem.4aeff613
APEXMalicious
RisingTrojan.Obfus/Autoit!1.BD7E (CLASSIC)
Ad-AwareTrojan.GenericKD.32682458
SophosMal/Generic-S
F-SecureTrojan.TR/Autoit.wzhsv
DrWebTrojan.DownLoader30.35870
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PK619
McAfee-GW-EditionBehavesLike.Win32.Downloader.th
EmsisoftAIT.Cottonmouth.3.Gen (B)
AviraTR/Autoit.wzhsv
MAXmalware (ai score=80)
Antiy-AVLTrojan/Generic.ASVCS3S.1E5
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1F2B1DA
ZoneAlarmTrojan.Win32.Bsymem.mje
MicrosoftTrojan:Win32/Occamy.C
AhnLab-V3Win-Trojan/Autoinj03.Exp
McAfeeArtemis!2C9F626447AE
MalwarebytesTrojan.MalPack.AutoIt
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.Autoit.ENM
IkarusTrojan.Autoit
FortinetAutoIt/Injector.ENM!tr
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (W)
Qihoo-360Win32/Trojan.641

How to remove Win32/Injector.Autoit.ENM?

Win32/Injector.Autoit.ENM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment