Trojan

About “Trojan.Win32.Chapak.eggy” infection

Malware Removal

The Trojan.Win32.Chapak.eggy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Chapak.eggy virus can do?

  • Attempts to connect to a dead IP:Port (4 unique times)
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Russian
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

lowupdate3.top
iplogger.org
apps.identrust.com
isrg.trustid.ocsp.identrust.com
ocsp.int-x3.letsencrypt.org
lowupdate4.top

How to determine Trojan.Win32.Chapak.eggy?


File Info:

crc32: 45ECF541
md5: 6d26d4585f80fa9d9c306a68dadc9173
name: eupanda.exe
sha1: 98dfdbbd061f2abf1da5c0d7feea670a48a7ec3f
sha256: e497bd74a134b10d6bd5385cd59fe4c60758bc5135c970422cb868e6f801ce02
sha512: 62cfb1cb0ca43f7be62236af9ba9a06f7c487f359545013486b6b921ccaa3d936b0ac9b29fb5464fca30041967bcd3a33243d56585f93bac7df5583843b37b07
ssdeep: 24576:SLvZXEIrldx5XeJFwU70GWszMCkSuOIKf:SZXEgldrXeJFB07sY/jK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName:
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments: Modified by an unpaid evaluation copy of Resource Tuner 2. http://www.heaventools.com
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename:
Translation: 0x0000 0x04e3

Trojan.Win32.Chapak.eggy also known as:

DrWebTrojan.Siggen8.61651
MicroWorld-eScanGen:Variant.Mikey.106734
McAfeeRDN/Generic Downloader.x
CylanceUnsafe
AegisLabTrojan.Win32.Chapak.4!c
SangforMalware
K7AntiVirusTrojan-Downloader ( 0055cde31 )
BitDefenderGen:Variant.Mikey.106734
K7GWTrojan-Downloader ( 0055cde31 )
BitDefenderThetaGen:NN.ZexaF.32519.1u0@ayUdN6gc
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EWK
APEXMalicious
Paloaltogeneric.ml
GDataGen:Variant.Mikey.106734
KasperskyTrojan.Win32.Chapak.eggy
AlibabaTrojanDownloader:Win32/Generic.548a8fa6
RisingDownloader.Agent!1.BB58 (CLASSIC)
Ad-AwareGen:Variant.Mikey.106734
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.AdwareElemental.ch
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.6d26d4585f80fa9d
EmsisoftGen:Variant.Mikey.106734 (B)
IkarusWorm.Win32.Ainslot
CyrenW32/Trojan.YBEW-5378
JiangminTrojanDownloader.Satacom.j
WebrootW32.Trojan.Gen
AviraTR/Dldr.Agent.wainh
Endgamemalicious (high confidence)
ArcabitTrojan.Mikey.D1A0EE
ZoneAlarmTrojan.Win32.Chapak.eggy
MicrosoftTrojan:Win32/Wacatac.B!ml
Acronissuspicious
VBA32BScope.TrojanRansom.Crusis
ALYacGen:Variant.Mikey.106734
MAXmalware (ai score=83)
MalwarebytesTrojan.LegionLoader
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H0CL919
FortinetW32/Agent.EWK!tr.dldr
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360HEUR/QVM20.1.C66B.Malware.Gen

How to remove Trojan.Win32.Chapak.eggy?

Trojan.Win32.Chapak.eggy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment