Worm

Worm:Win32/Eggnog!pz removal instruction

Malware Removal

The Worm:Win32/Eggnog!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Eggnog!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory

How to determine Worm:Win32/Eggnog!pz?


File Info:

name: 5379E0F0012FC2F82E89.mlw
path: /opt/CAPEv2/storage/binaries/6796e41a3ca83fd9dcc6564f6ec12fe7fedf5f6f4bb93a8bbaad5d729e17eea5
crc32: 51B1F2A2
md5: 5379e0f0012fc2f82e89f9824f46fc02
sha1: b0827f340f04eb2d60346cbffe012fa1287b02e6
sha256: 6796e41a3ca83fd9dcc6564f6ec12fe7fedf5f6f4bb93a8bbaad5d729e17eea5
sha512: 0a1af624e602a81ae253b3eb0cc3168c63564daeacfbf50f4f49073c091e9882d901ce44724dadf6482c903aace6bade7387299bfb62755ce2311d2d3ba3efd8
ssdeep: 1536:4MvKqZZQs1ShQi7+q0birvqqO9yBIRjQWV3e+Hx83+G8HbAGvgklRLCv:ZvZx1UGpiWqO9yqK63ey83+RsslRLCv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19093F103F1C1E476E05484FE9E53F628957E76613EAA58D39CB03FCE691F1A06D2E01A
sha3_384: ce7616b93efa44e4fb1374df854c6f0fcfd47fb27b7434c36bbf8d84f1f3126f40d7de337ceab1c4e9cc0fba07c62e72
ep_bytes: 558bec83c4f053b8346f4000e85fd4ff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm:Win32/Eggnog!pz also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.71191683
FireEyeGeneric.mg.5379e0f0012fc2f8
CAT-QuickHealWorm.EggnogPMF.S31599026
SkyhighBehavesLike.Win32.Eggnog.nc
McAfeeW32/Eggnog.worm.gen
MalwarebytesGeneric.Trojan.Delf.DDS
ZillyaWorm.Eggnog.Win32.52
SangforTrojan.Win32.Save.a
K7AntiVirusEmailWorm ( 005a7b871 )
K7GWEmailWorm ( 005a7b871 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaAI:Packer.CD9138B721
VirITTrojan.Win32.Generic.BBBU
SymantecW32.Nofer.A@mm
ESET-NOD32Win32/Eggnog.E
APEXMalicious
ClamAVWin.Worm.Eggnog-1
KasperskyP2P-Worm.Win32.Eggnog.f
BitDefenderTrojan.GenericKD.71191683
NANO-AntivirusTrojan.Win32.Eggnog.qxemv
AvastWin32:Evo-gen [Trj]
TencentWorm.Win32.Eggnog.a
SophosW32/Eggnog-Fam
BaiduWin32.Worm.Eggnog.a
F-SecureDropper.DR/Delphi.Gen
DrWebWin32.HLLW.Google.24577
VIPRETrojan.GenericKD.71191683
TrendMicroWORM_EGGNOG.SMI
Trapminemalicious.high.ml.score
EmsisoftTrojan.GenericKD.71191683 (B)
IkarusWorm.Win32.Eggnog
JiangminTrojan/Cospet.gv
WebrootW32.Worm.Eggnog.Gen
GoogleDetected
AviraDR/Delphi.Gen
VaristW32/Eggnog.A2.gen!Eldorado
Antiy-AVLWorm[P2P]/Win32.Eggnog
Kingsoftmalware.kb.a.1000
MicrosoftWorm:Win32/Eggnog!pz
XcitiumTrojWare.Win32.Cospet.X0@1mafpo
ArcabitTrojan.Generic.D43E4C83
ViRobotWorm.Win32.A.P2P-Eggnog.36850
ZoneAlarmP2P-Worm.Win32.Eggnog.f
GDataWin32.Worm.Fearso.A
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Eggnog.C3534480
Acronissuspicious
VBA32BScope.Worm.Pluto
ALYacTrojan.GenericKD.71191683
MAXmalware (ai score=85)
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallWORM_EGGNOG.SMI
RisingWorm.Eggnog!1.E840 (CLASSIC)
YandexTrojan.GenAsa!9WQyNROzKr8
SentinelOneStatic AI – Malicious PE
FortinetW32/Eggnog.E!worm
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.40f04e
DeepInstinctMALICIOUS

How to remove Worm:Win32/Eggnog!pz?

Worm:Win32/Eggnog!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment