Email-Worm.Win32.LovGate removal guide

The Email-Worm.Win32.LovGate is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Email-Worm.Win32.LovGate virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Email-Worm.Win32.LovGate?


File Info:
crc32: E975CF89
md5: 92261726de4dd9b39e4edfdfaf01aa1e
name: 92261726DE4DD9B39E4EDFDFAF01AA1E.mlw
sha1: 4153142fd9d0c70fa0faa1099afd426598f15b6e
sha256: 2bc537df04cceb724dbfd9b6bb93a837f184bf5f1b759b3cb9f474d94a1acec2
sha512: 881013db939d58e7741c8b0b7ce99a20a1bae0cc6e7f1905a4291aa16ee8971b27524ac36463b80d6c74c6e2b7aa8f72c022c97d78e9670be3981932957d8692
ssdeep: 6144:AQqUTuxU1kY7rlkvfyeMOPQ/7O3dkekQbg9vq8a0FBkuodt:Jui1k2lUaeMOPQ/C3dkFQbGSCFv+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: deliberate
FileVersion: 2.1.7.10
CompanyName: slut
LegalTrademarks: doohickey
Comments: overtired
ProductName: boarder
FileDescription: enslaved
Translation: 0x0000 0x04e4

Email-Worm.Win32.LovGate also known as:

K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Loader.840
ALYac	Trojan.GenericKD.46505530
Cylance	Unsafe
Sangfor	Spyware.Win32.Noon.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Tnega.fd12a4c8
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Ninjector.J.gen!Camelot
Symantec	Trojan Horse
ESET-NOD32	Win32/Formbook.AA
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Email-Worm.Win32.LovGate.gen
BitDefender	Trojan.GenericKD.46505530
MicroWorld-eScan	Trojan.GenericKD.46505530
Ad-Aware	Trojan.GenericKD.46505530
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.Swotter.iynls
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gh
FireEye	Trojan.GenericKD.46505530
Emsisoft	Trojan.GenericKD.46505530 (B)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Tnega.BK!MTB
AegisLab	Trojan.Win32.Noon.l!c
ZoneAlarm	HEUR:Email-Worm.Win32.LovGate.gen
GData	Win32.Trojan-Stealer.FormBook.58DQDT
AhnLab-V3	Trojan/Win.Tnega.C4529063
McAfee	RDN/XLoader
MAX	malware (ai score=88)
VBA32	BScope.Trojan-Dropper.Injector
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.F0D1C00FH21
Rising	Trojan.Injector/NSIS!1.D743 (CLASSIC)
Yandex	Trojan.Igent.bV38g6.21
Fortinet	W32/Kryptik.J!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Email-Worm.Win32.LovGate?

Email-Worm.Win32.LovGate removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X