Worm

Worm:Win32/Enosch!atmn (file analysis)

Malware Removal

The Worm:Win32/Enosch!atmn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Enosch!atmn virus can do?

  • Performs some HTTP requests
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Worm:Win32/Enosch!atmn?


File Info:

crc32: B903DF87
md5: caecbc3b13391d62cbecadd4e81bf816
name: CAECBC3B13391D62CBECADD4E81BF816.mlw
sha1: 44a89948562243f3a35de8f724c65d830fa3992e
sha256: 40a146f459f8c948376c4b312b9a8fbb91019dfa7cec564b52226228c7b38d0f
sha512: 39c1907aea6892eed8fcee8d600a0bc49f970f9daf303436e2074f62ba417bdd068196d11ee321cb3936a8d1f59246a2531e4eefbed89fc45500a11b9f3a4e17
ssdeep: 24576:LEiLuKPfLfDrtSwY5mDz/A4iFgGNSqOj3WpwEhaVntSiKmSCF0kN3Ize7m20Gf7:Ld6YftsRgqzC3WpSVllI3VGizi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Enosch!atmn also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Fugrafa.2074
FireEyeGeneric.mg.caecbc3b13391d62
CAT-QuickHealTrojan.Enosch.A6
McAfeeSpy-Agent.gg
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
K7AntiVirusTrojan ( 0030c2e21 )
BitDefenderGen:Variant.Fugrafa.2074
K7GWPassword-Stealer ( 0030c2e21 )
Cybereasonmalicious.b13391
InvinceaMal/Generic-S
CyrenW32/S-bfc0060a!Eldorado
SymantecML.Attribute.HighConfidence
TotalDefenseWin32/FakeFLDR_i
APEXMalicious
ClamAVWin.Trojan.Agent-1372491
KasperskyTrojan-Dropper.Win32.Agent.fzcd
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
RisingTrojan.Ransom!1.690B (CLASSIC)
Ad-AwareGen:Variant.Fugrafa.2074
EmsisoftGen:Variant.Fugrafa.2074 (B)
ComodoTrojWare.Win32.Agent.IBBH@5dh954
F-SecureTrojan.TR/Patched.Ren.Gen
DrWebTrojan.DownLoader11.3903
TrendMicroWORM_SILLY.SMRP
McAfee-GW-EditionBehavesLike.Win32.Generic.th
SophosMal/Generic-S
IkarusWin32.Outbreak
MaxSecureTrojan.Scar.OICH
AviraTR/Patched.Ren.Gen
MAXmalware (ai score=89)
KingsoftWin32.Heur.KVM007.a.(kcloud)
MicrosoftWorm:Win32/Enosch!atmn
ArcabitTrojan.Fugrafa.D81A
SUPERAntiSpywareTrojan.Agent/Gen-FolderCon
ZoneAlarmTrojan-Dropper.Win32.Agent.fzcd
GDataGen:Variant.Fugrafa.2074
CynetMalicious (score: 100)
AhnLab-V3HEUR/Fakon.mwf.X1352
Acronissuspicious
BitDefenderThetaAI:Packer.6FBCBF421F
ALYacGen:Variant.Fugrafa.2074
VBA32BScope.TrojanRansom.Blocker
MalwarebytesWorm.Agent
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/DataStealer.B
TrendMicro-HouseCallWORM_SILLY.SMRP
TencentTrojan.Win32.Dropper.abl
YandexTrojan.GenAsa!uMTwPhbSHs4
SentinelOneStatic AI – Malicious PE
FortinetW32/DataStealer.B!tr
AVGWin32:Sality [Inf]
AvastWin32:Sality [Inf]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM19.1.5DB7.Malware.Gen

How to remove Worm:Win32/Enosch!atmn?

Worm:Win32/Enosch!atmn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment