Win32/Injector.ENPK removal guide

The Win32/Injector.ENPK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.ENPK virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Executed a process and injected code into it, probably while unpacking
Deletes its original binary from disk
Steals private information from local Internet browsers
Creates a hidden or system file
Creates a copy of itself
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

mecharnise.ir

How to determine Win32/Injector.ENPK?


File Info:
crc32: F7FC6FE6
md5: 3a3bea8a82700d9d27807a3a0887bec2
name: pablox.exe
sha1: 6c3f2bdf56225c3d003bb1a48f4ad1f7c9d6a36a
sha256: 9c1c50a6555a369b3adcabf576590eafcf0b0fd9b6f491839111528a445c21cd
sha512: e878e6ec857b1f6c0f643ccd8648316ea54cff7c5838dbc0167ef55a7c55d7721861941a6973d04ec2a9d7dd0fb10be581263c200b32c30677af8c76fdb582b9
ssdeep: 12288:8ev7BmfbLWqfNhR9yMz+uRJ3szhb9iartaLNhzyQQh7Zrfp:dGmq1htjJ3stlcynZrfp
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Cotare Corp.
InternalName: 
FileVersion: 6
CompanyName: Bm Co.
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 6--
FileDescription: 
OriginalFilename: 
Translation: 0x0409 0x04e4

Win32/Injector.ENPK also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.3a3bea8a82700d9d
McAfee	PWS-FCRZ!3A3BEA8A8270
Sangfor	Malware
K7AntiVirus	Trojan ( 00570de21 )
K7GW	Trojan ( 00570de21 )
Invincea	Generic ML PUA (PUA)
APEX	Malicious
DrWeb	BackDoor.SpyBotNET.25
SentinelOne	DFI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.D9!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
AhnLab-V3	Trojan/Win32.Injector.C4205911
BitDefenderTheta	Gen:NN.ZelphiF.34298.QG0@amz4pGdi
Malwarebytes	Trojan.MalPack.DLF
ESET-NOD32	a variant of Win32/Injector.ENPK
Rising	Trojan.Injector!1.CD4A (CLASSIC)
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.ETYV!tr
Cybereason	malicious.f56225

How to remove Win32/Injector.ENPK?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Injector.ENPK removal guide