About “P2P-Worm.Win32.Palevo.igaw” infection

The P2P-Worm.Win32.Palevo.igaw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What P2P-Worm.Win32.Palevo.igaw virus can do?

Network activity detected but not expressed in API logs

How to determine P2P-Worm.Win32.Palevo.igaw?


File Info:
crc32: 74767FF7
md5: feb057fadeed332a46a61c81f44cac41
name: FEB057FADEED332A46A61C81F44CAC41.mlw
sha1: 5accc3632f86cbfa16d6a921e535fc1918801aa7
sha256: 2cc12e390e2eb4d43ca6998804d391731817b0765e6bb8d7cf8979f4fba92269
sha512: 1707ac10e64fc57733e8cfe12a623e7446d001b3333216ad2eb950f61cc50c81726fbe83882c73934f4e2d7bd12f2f5fa81c167601bd8f1248c53bec65dcf6fd
ssdeep: 3072:54vZP9M0q1LoQAjT0zd4SQxBruLye+4LWBCQyXuRqELdUPNe0uQ4Kmxo8nPuL4N:5YZ2xjAjQOyLl2CNXZPNeE4Km9uL4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Tonec Inc., Copyright xa9 1999 - 2015
InternalName: IEMonitor
FileVersion: 6, 22, 1, 1
CompanyName: Tonec Inc.
PrivateBuild: 
LegalTrademarks: Internet Download Manager
Comments: Internet Download Manager agent for click monitoring in IE-based browsers
ProductName: IEMonitor Application
SpecialBuild: 
ProductVersion: 6, 22, 1, 1
FileDescription: Internet Download Manager agent for click monitoring in IE-based browsers
OriginalFilename: IEMonitor.EXE
Translation: 0x0409 0x04b0

P2P-Worm.Win32.Palevo.igaw also known as:

K7AntiVirus	Riskware ( 0040eff71 )
ALYac	Trojan.GenericKD.40103260
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Trojan.GenericKD.40103260
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.adeed3
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	P2P-Worm.Win32.Palevo.igaw
MicroWorld-eScan	Trojan.GenericKD.40103260
Tencent	Win32.Worm-p2p.Palevo.Ehrk
Ad-Aware	Trojan.GenericKD.40103260
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.BadFile.dh
FireEye	Trojan.GenericKD.40103260
Emsisoft	Trojan.GenericKD.40103260 (B)
Avira	WORM/Palevo.prkjk
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D263ED5C
ZoneAlarm	P2P-Worm.Win32.Palevo.igaw
GData	Trojan.GenericKD.40103260
TACHYON	Worm/W32.Palevo.262144
McAfee	Artemis!FEB057FADEED
MAX	malware (ai score=85)
VBA32	Worm.Palevo
Panda	Trj/CI.A
Fortinet	W32/Shiz.JJDW!tr.bdr
Paloalto	generic.ml

How to remove P2P-Worm.Win32.Palevo.igaw?

P2P-Worm.Win32.Palevo.igaw removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X