Malware

Win32/Injector.ENUD removal

Malware Removal

The Win32/Injector.ENUD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.ENUD virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Injector.ENUD?


File Info:

crc32: CAF44FC8
md5: 235719ee5336ced5c5d5d0e873112861
name: upload_file
sha1: c60acbae08d00a2ff755e637d557d59bc6b50ba4
sha256: c38dbdd341beb6f537971c9b0d98083ac08b59517052052b85d9368f85f63936
sha512: 45a65e0997bced50f7046221091f24cc745757689f32048d4055d72d1b5d94fe8470b2ade7201df954d0546bfa47b7d8616c1a8035d6fb075b5b39151936a8ce
ssdeep: 768:LcnLsFBJD2l+XUWbOjsYxnCPiOPx9c3xHJ1YPBi+y0oq8z1RWsEggSCyw:YLGJDMiPbkjCPPIheBiT0o+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: Pensionry2
FileVersion: 1.00
CompanyName: InFundo
ProductName: COG
ProductVersion: 1.00
OriginalFilename: Pensionry2.exe

Win32/Injector.ENUD also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.35053601
FireEyeGeneric.mg.235719ee5336ced5
McAfeePWS-FCSP!235719EE5336
CylanceUnsafe
AegisLabTrojan.Win32.Vebzenpak.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.35053601
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.e5336c
InvinceaMal/Generic-S + Troj/VB-KVH
CyrenW32/VBKrypt.AOR.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Trojan.VBGeneric-9786333-0
KasperskyTrojan.Win32.Vebzenpak.abmg
AlibabaTrojan:Win32/Vebzenpak.d2987a37
RisingTrojan.Injector!8.C4 (TFE:5:8hcUqyIierM)
Ad-AwareTrojan.GenericKD.35053601
SophosTroj/VB-KVH
F-SecureTrojan.TR/Injector.zaykc
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.VEBZENPAK.USMANK220
McAfee-GW-EditionBehavesLike.Win32.Trojan.qm
EmsisoftTrojan.GenericKD.35053601 (B)
IkarusTrojan.VB.Crypt
AviraTR/Injector.zaykc
MAXmalware (ai score=89)
Antiy-AVLTrojan/Win32.Vebzenpak
MicrosoftTrojan:Win32/Ymacco.AAA7
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Generic.D216E021
ZoneAlarmTrojan.Win32.Vebzenpak.abmg
GDataWin32.Trojan-Downloader.GuLoader.3XD1G0
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.Injector.R354690
BitDefenderThetaGen:NN.ZevbaCO.34590.dm0@aGR7Mabi
ALYacTrojan.GenericKD.35053601
MalwarebytesTrojan.Injector
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Injector.ENUD
TrendMicro-HouseCallTrojanSpy.Win32.VEBZENPAK.USMANK220
TencentWin32.Trojan.Vebzenpak.Hoyh
YandexTrojan.AvsArher.bTx3Yb
SentinelOneDFI – Malicious PE
FortinetW32/Generik.BVNLJQN!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.85d

How to remove Win32/Injector.ENUD?

Win32/Injector.ENUD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment