Email-Worm.Win32.LovGate.kzi information

The Email-Worm.Win32.LovGate.kzi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Email-Worm.Win32.LovGate.kzi virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Email-Worm.Win32.LovGate.kzi?


File Info:
name: 0E27BDD5D9777C92AE16.mlw
path: /opt/CAPEv2/storage/binaries/ac43b3e666030709186cc234e7f008a156cd4bf5970058a9014f8f76a40cd55f
crc32: B2288CBF
md5: 0e27bdd5d9777c92ae16254e5416aa7e
sha1: a36c885774f2ad1a324f4119c2fda50308b587ad
sha256: ac43b3e666030709186cc234e7f008a156cd4bf5970058a9014f8f76a40cd55f
sha512: a98c97d73d6eb478dd386d3ce68e675cb374a9bdd4a9ff51401cce2f505c74fc66a4174e33b9a33e87dd0ddc9e48d0ecebace2a72ff1c730fa2caecc5cff08de
ssdeep: 1536:PC4qH55kCdhbOrgiQV9MXLv0l0nRY1eFozns:PCBrkWSETVm7a0nRYIb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E5F308656E94D40ED36A5B78F4C0E6B1CA667FAA7902D3031CD73E4F78037048DA1E6A
sha3_384: f66b2be991cb2656302201382b9e405a82ea2a584ac1b4f0e9673a16e83a16a90d079754b142b4cdcfeaa3ca900db947
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-10 15:18:59

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: Tray5.exe
LegalCopyright:  
OriginalFilename: Tray5.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Email-Worm.Win32.LovGate.kzi also known as:

Lionic	Worm.Win32.LovGate.t!c
Alibaba	Worm:Win32/LovGate.d80168c2
Cybereason	malicious.774f2a
BitDefenderTheta	Gen:NN.ZemsilF.34084.jm0@amLmkyi
Cyren	W32/MSIL_Kryptik.BWA.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R002H06LD21
Kaspersky	Email-Worm.Win32.LovGate.kzi
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
FireEye	Generic.mg.0e27bdd5d9777c92
SentinelOne	Static AI – Malicious PE
Gridinsoft	Ransom.Win32.Sabsik.sa
Cynet	Malicious (score: 100)
McAfee	RDN/Lovgate.gen@MM
APEX	Malicious
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen

How to remove Email-Worm.Win32.LovGate.kzi?

Email-Worm.Win32.LovGate.kzi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X