Categories: Worm

What is “BScope.Worm.Eggnog”?

The BScope.Worm.Eggnog is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.Worm.Eggnog virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Likely virus infection of existing system binary
Attempts to identify installed AV products by installation directory
Anomalous binary characteristics

How to determine BScope.Worm.Eggnog?


File Info:
name: 4C219C41950626522E7E.mlwpath: /opt/CAPEv2/storage/binaries/2ca187147359027ceb750255eac3b49264d21683813b17c7665c0e5aca71c66ecrc32: 4AB60E3Bmd5: 4c219c41950626522e7ed99c28f5950asha1: 05d5e6147684da16001b4d9752ccc5f7bde4c8acsha256: 2ca187147359027ceb750255eac3b49264d21683813b17c7665c0e5aca71c66esha512: 72db22969229d0ca57a5d30f1b4c8634d00460f4824bb594fd8d2a414d1fc5f797245324e89e8d0c7a6b1a38d2f1c1cca32657683a2cf565eb6b736736206813ssdeep: 768:KUOEhSeqZwJg1e1GiCyd92Do3H8Pw/+3Ky4rcqEiMg18aaFWrYLQdjCUeCJ2qptB:zOklqZEg15i1qf5IcxZgXHa1qpQqltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15DF3AF03F5E0C633C1508AFDAD0BD52897B777602D651682BAF25F4F9E1A6408D3C29Esha3_384: eadfae19bdf982ed688683f080c559b28e0ee70ff376ddb001d13701a7017dd14e707d29a13940e4da3d3499d9acd237ep_bytes: 55545d83c4f053b8346f4000e85fd4fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

BScope.Worm.Eggnog also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Trojan.P2P-Worm.jmX@aOHSCb
FireEye	Generic.mg.4c219c4195062652
CAT-QuickHeal	Trojan.IgenericCS.S27288946
ALYac	Gen:Trojan.P2P-Worm.jmX@aOHSCb
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.195062
Arcabit	Trojan.P2P-Worm.E982CA
Baidu	Win32.Worm.Eggnog.a
Cyren	W32/EggNog.H.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Eggnog.E
APEX	Malicious
ClamAV	Win.Worm.Fearso-7358009-0
Kaspersky	UDS:Worm.Win32.Generic
BitDefender	Gen:Trojan.P2P-Worm.jmX@aOHSCb
NANO-Antivirus	Trojan.Win32.Delphi.iarwcx
Avast	Win32:Malware-gen
Tencent	Worm.Win32.Eggnog.a
Ad-Aware	Gen:Trojan.P2P-Worm.jmX@aOHSCb
Emsisoft	Gen:Trojan.P2P-Worm.jmX@aOHSCb (B)
DrWeb	Win32.HLLW.Google.24577
Zillya	Worm.Eggnog.Win32.45121
TrendMicro	TROJ_GEN.R03BC0PDQ22
McAfee-GW-Edition	BehavesLike.Win32.Sytro.cz
Sophos	Mal/Generic-R + Troj/Agent-AJFK
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Cospet.gv
Avira	DR/Delphi.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Win32.Worm.Fearso.A
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Agent.C4331
McAfee	PolyPatch-UPX
MAX	malware (ai score=84)
VBA32	BScope.Worm.Eggnog
Malwarebytes	Generic.Trojan.Malicious.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BC0PDQ22
Rising	Worm.Eggnog!1.9A44 (CLASSIC)
Yandex	Trojan.GenAsa!9WQyNROzKr8
Ikarus	Email-Worm.Win32.Fearso
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Eggnog.E!worm
BitDefenderTheta	AI:Packer.8162700F21
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)