Worm

About “Worm:Win32/Eggnog!pz” infection

Malware Removal

The Worm:Win32/Eggnog!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Eggnog!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Worm:Win32/Eggnog!pz?


File Info:

name: EC22FED859FD46A2511D.mlw
path: /opt/CAPEv2/storage/binaries/6fe77ba3408e9a5eaf60773d6081c9614de73de16235b00ff1e89b6f053b5a72
crc32: AC0DB2FD
md5: ec22fed859fd46a2511d2fbe447cd722
sha1: 51d04b31e4146406551a8e9e4f5c5f28dfb3f0db
sha256: 6fe77ba3408e9a5eaf60773d6081c9614de73de16235b00ff1e89b6f053b5a72
sha512: eebc1def084d6bd3ca02e0767cb66933df37a92382a8aec00009cd7786c02ebf5b1cf1b8553a4ce160027d6d667b448dad8a89eae21d6216d34d850246ec5ccb
ssdeep: 1536:ovKqZZQs1ShQi7+q0birvqVO9yuzDRNNBIDWtuiq3VG8hO1qvGLv7yavn27o50Vz:ovZx1UGpiWVO9yuPRTBIytuZfyqvU7yr
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T187A3E147F6D1E972C1A0C6BE6D13B528DE7B7D202E4940A31DFA1F8D29251C16D2E0EB
sha3_384: 8bf06e776abc793bb9f51f785495f2d407bfb655296d638d605678506dedfaaf43f435c3cc9110d8c85fe07952307403
ep_bytes: 558bec83c4f053b8346f4000e85fd4ff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm:Win32/Eggnog!pz also known as:

BkavW32.FamVT.EggogK.Worm
LionicWorm.Win32.Eggnog.lMHE
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Google.24577
MicroWorld-eScanGen:Trojan.P2P-Worm.fGZ@aa4wiCi
ClamAVWin.Worm.Eggnog-1
FireEyeGeneric.mg.ec22fed859fd46a2
CAT-QuickHealWorm.Eggnog.S28830318
SkyhighBehavesLike.Win32.Eggnog.nc
McAfeeW32/Eggnog.worm.gen
Cylanceunsafe
ZillyaTrojan.Cospet.Win32.221
SangforTrojan.Win32.Save.a
K7AntiVirusEmailWorm ( 00556f041 )
AlibabaWorm:Win32/Eggnog.f2b3
K7GWEmailWorm ( 00556f041 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.P2P-Worm.E6556B
BitDefenderThetaAI:Packer.775760F121
VirITTrojan.Win32.Generic.BBBU
SymantecW32.Nofer.A@mm
ESET-NOD32Win32/Eggnog.E
APEXMalicious
CynetMalicious (score: 100)
KasperskyP2P-Worm.Win32.Eggnog.f
BitDefenderGen:Trojan.P2P-Worm.fGZ@aa4wiCi
NANO-AntivirusTrojan.Win32.Eggnog.qxemv
AvastWin32:WormX-gen [Wrm]
TencentWorm.Win32.Eggnog.a
EmsisoftGen:Trojan.P2P-Worm.fGZ@aa4wiCi (B)
F-SecureDropper.DR/Delphi.Gen
BaiduWin32.Worm.Eggnog.a
VIPREGen:Trojan.P2P-Worm.fGZ@aa4wiCi
TrendMicroWORM_EGGNOG.SMI
Trapminemalicious.high.ml.score
SophosW32/Eggnog-Fam
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Cospet.gv
WebrootW32.Worm.Eggnog.Gen
GoogleDetected
AviraDR/Delphi.Gen
Antiy-AVLWorm[P2P]/Win32.Eggnog
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Cospet.X0@1mafpo
MicrosoftWorm:Win32/Eggnog!pz
ViRobotWorm.Win32.A.P2P-Eggnog.36850
ZoneAlarmP2P-Worm.Win32.Eggnog.f
GDataWin32.Worm.Fearso.A
VaristW32/Eggnog.A.gen!Eldorado
AhnLab-V3Worm/Win32.Eggnog.R66977
Acronissuspicious
VBA32BScope.Worm.Pluto
ALYacGen:Trojan.P2P-Worm.fGZ@aa4wiCi
MAXmalware (ai score=87)
MalwarebytesGeneric.Trojan.Delf.DDS
PandaGeneric Malware
TrendMicro-HouseCallWORM_EGGNOG.SMI
RisingWorm.Eggnog!1.E840 (CLASSIC)
YandexTrojan.GenAsa!9WQyNROzKr8
IkarusWorm.Win32.Eggnog
MaxSecureWorm.W32.Eggnog.F
FortinetW32/Eggnog.E!worm
AVGWin32:WormX-gen [Wrm]
DeepInstinctMALICIOUS

How to remove Worm:Win32/Eggnog!pz?

Worm:Win32/Eggnog!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment