Worm

About “Worm:Win32/Eggnog!pz” infection

Malware Removal

The Worm:Win32/Eggnog!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Worm:Win32/Eggnog!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory

How to determine Worm:Win32/Eggnog!pz?



File Info:

name: 3AD1F2D1F708FF6191E3.mlw
path: /opt/CAPEv2/storage/binaries/72ac4020600485d364bd3bafd4d3e4eb6b6ef652a214a229dfc0974925f179e0
crc32: 987CD06B
md5: 3ad1f2d1f708ff6191e3f44505cb3e41
sha1: 03083c6897c66767c572c37ce8523e80b3c0d073
sha256: 72ac4020600485d364bd3bafd4d3e4eb6b6ef652a214a229dfc0974925f179e0
sha512: 8da3c04f3ab9c9539c2aac0d4eddf3615ba7409b37ccfcbda657dc5d47a61fe8154937afc66a7dd368856efb648f24547421fd90cbe6dccf0896c9d7ff916df8
ssdeep: 1536:4MvKqZZQs1ShQi7+q0birvqqO9yBIRjQeZiwwTyx+FgsFvGz/cGG8//u:ZvZx1UGpiWqO9yqKewBQG6/u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F93E143F5C2DA32C19058FE8E47F668A66E36303E6998D219F17FCE6D0F190692C15B
sha3_384: 2737dc069b63567d65b7e7657d8112caeda7381f492a883d8b845b573aae2c30fe099d69dc42f77e76ab211c6063653d
ep_bytes: 558bec83c4f053b8346f4000e85fd4ff
timestamp: 1992-06-19 22:22:17


Version Info:

0: [No Data]

Worm:Win32/Eggnog!pz also known as:

BkavW32.AIDetectMalware
LionicWorm.Win32.Eggnog.lMHE
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.70680309
CAT-QuickHealWorm.EggnogPMF.S31236838
SkyhighBehavesLike.Win32.Eggnog.nc
ALYacTrojan.GenericKD.70680309
Cylanceunsafe
ZillyaWorm.Eggnog.Win32.52
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaWorm:Win32/Eggnog.f2b3
K7GWEmailWorm ( 005a7b871 )
K7AntiVirusEmailWorm ( 005a7b871 )
ArcabitTrojan.Generic.D4367EF5
BaiduWin32.Worm.Eggnog.a
VirITTrojan.Win32.Generic.BBBU
SymantecW32.Nofer.A@mm
ESET-NOD32Win32/Eggnog.E
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Worm.Eggnog-1
KasperskyP2P-Worm.Win32.Eggnog.f
BitDefenderTrojan.GenericKD.70680309
NANO-AntivirusTrojan.Win32.Eggnog.qxemv
ViRobotWorm.Win32.A.P2P-Eggnog.36850
AvastWin32:Evo-gen [Trj]
TencentWorm.Win32.Eggnog.a
SophosW32/Eggnog-Fam
F-SecureDropper.DR/Delphi.Gen
DrWebWin32.HLLW.Google.24577
VIPRETrojan.GenericKD.70680309
TrendMicroWORM_EGGNOG.SMI
EmsisoftTrojan.GenericKD.70680309 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Cospet.gv
WebrootW32.Worm.Eggnog.Gen
VaristW32/Eggnog.A2.gen!Eldorado
AviraDR/Delphi.Gen
Antiy-AVLWorm[P2P]/Win32.Eggnog
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Cospet.X0@1mafpo
MicrosoftWorm:Win32/Eggnog!pz
ZoneAlarmP2P-Worm.Win32.Eggnog.f
GDataWin32.Worm.Fearso.A
GoogleDetected
AhnLab-V3Worm/Win32.Eggnog.C3534480
Acronissuspicious
McAfeeW32/Eggnog.worm.gen
VBA32BScope.Worm.Pluto
MalwarebytesGeneric.Trojan.Delf.DDS
PandaGeneric Malware
TrendMicro-HouseCallWORM_EGGNOG.SMI
RisingWorm.Eggnog!1.E840 (CLASSIC)
YandexTrojan.GenAsa!9WQyNROzKr8
IkarusWorm.Win32.Eggnog
MaxSecureWorm.W32.Eggnog.F
FortinetW32/Eggnog.E!worm
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.897c66
DeepInstinctMALICIOUS

How to remove Worm:Win32/Eggnog!pz?

Worm:Win32/Eggnog!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment