ThreatExpert's Statistics for Mal/EncPk-IR [Sophos]:

Mal/EncPk-IR [Sophos] is also known as:

Threat Alias	Number of Incidents
Downloader-BRM [McAfee]	1
Trojan.Bredolab [Symantec]	1
Trojan.Win32.Agent [Ikarus]	1
Trojan.Win32.Agent.cnyo [Kaspersky Lab]	1
Trojan-Downloader.Win32.Fakeinit [Ikarus]	1
Trojan-Downloader.Win32.FraudLoad.ezd [Kaspersky Lab]	1
Win-Trojan/Waledoc.22528 [AhnLab]	1

Mal/EncPk-IR [Sophos] is known to be created as:

%Programs%\startup\rncsys32.exe

%System%\winupdate.exe

Notes:

%Programs% is a variable that refers to the file system directory that contains the user's program groups. A typical path is C:\Documents and Settings\[UserName]\Start Menu\Programs.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).