Worm

Worm:Win32/Eggnog!pz information

Malware Removal

The Worm:Win32/Eggnog!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Eggnog!pz virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Worm:Win32/Eggnog!pz?


File Info:

name: 39752C6FDAA905F845C9.mlw
path: /opt/CAPEv2/storage/binaries/ccfb1ca5bc5575d73c9140be514163342a92782b866b631f6ec880858d8a9ec9
crc32: 88460C61
md5: 39752c6fdaa905f845c91619d9f242bc
sha1: 33284b27b02cbd588ebd7941dfe9b7f38f730ffb
sha256: ccfb1ca5bc5575d73c9140be514163342a92782b866b631f6ec880858d8a9ec9
sha512: 8fd33bc67bb07ce91e7a400ba0c178607ed1e0595ee0024ac01e094eb7c5eb13b75769d0ae3bf7727e6fe60b62c4434f7f5e76104d9097a8a07e5ab7ff81395f
ssdeep: 3072:ovZx1UGpiWVO9yuPRTBIytuZfyqvU7yavn2Ms:EvuSiWVO9tPN2OulmWavQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10DA3F187F7D1E875C4A48ABE6D07B525EE7B7E102F09806328FA5FCD28251912C5E0E7
sha3_384: 5db48431b56e2d2ba448f3b1d7505770ddc37fe672a13d83dda1fcfee649d7abd1b4b09d07b755c73ced4cba96a407c0
ep_bytes: 558bec83c4f053b8346f4000e85fd4ff
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Worm:Win32/Eggnog!pz also known as:

BkavW32.FamVT.EggogK.Worm
MicroWorld-eScanGen:Trojan.P2P-Worm.gGZ@aa4wiCi
ClamAVWin.Worm.Eggnog-1
CAT-QuickHealWorm.Eggnog.S28830318
SkyhighBehavesLike.Win32.Eggnog.nc
McAfeeW32/Eggnog.worm.gen
MalwarebytesGeneric.Trojan.Delf.DDS
VIPREGen:Trojan.P2P-Worm.gGZ@aa4wiCi
SangforTrojan.Win32.Save.a
K7AntiVirusEmailWorm ( 005a7b871 )
K7GWEmailWorm ( 005a7b871 )
Cybereasonmalicious.7b02cb
BitDefenderThetaAI:Packer.AAC1B97421
VirITTrojan.Win32.Generic.BBBU
SymantecW32.Nofer.A@mm
Elasticmalicious (high confidence)
ESET-NOD32Win32/Eggnog.E
APEXMalicious
CynetMalicious (score: 100)
KasperskyP2P-Worm.Win32.Eggnog.f
BitDefenderGen:Trojan.P2P-Worm.gGZ@aa4wiCi
NANO-AntivirusTrojan.Win32.Eggnog.qxemv
AvastWin32:WormX-gen [Wrm]
TencentWorm.Win32.Eggnog.a
EmsisoftGen:Trojan.P2P-Worm.gGZ@aa4wiCi (B)
BaiduWin32.Worm.Eggnog.a
F-SecureDropper.DR/Delphi.Gen
DrWebWin32.HLLW.Google.24577
ZillyaTrojan.Cospet.Win32.221
TrendMicroWORM_EGGNOG.SMI
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.39752c6fdaa905f8
SophosW32/Eggnog-Fam
SentinelOneStatic AI – Malicious PE
GDataWin32.Worm.Fearso.A
JiangminTrojan/Cospet.gv
WebrootW32.Worm.Eggnog.Gen
GoogleDetected
AviraDR/Delphi.Gen
MAXmalware (ai score=89)
Antiy-AVLWorm[P2P]/Win32.Eggnog
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Cospet.X0@1mafpo
ArcabitTrojan.P2P-Worm.EB69C8
ViRobotWorm.Win32.A.P2P-Eggnog.36850
ZoneAlarmP2P-Worm.Win32.Eggnog.f
MicrosoftWorm:Win32/Eggnog!pz
VaristW32/Eggnog.A.gen!Eldorado
AhnLab-V3Worm/Win32.Eggnog.R66977
Acronissuspicious
VBA32BScope.Worm.Pluto
ALYacGen:Trojan.P2P-Worm.gGZ@aa4wiCi
Cylanceunsafe
PandaGeneric Malware
TrendMicro-HouseCallWORM_EGGNOG.SMI
RisingWorm.Eggnog!1.E840 (CLASSIC)
YandexTrojan.GenAsa!9WQyNROzKr8
IkarusWorm.Win32.Eggnog
MaxSecureWorm.W32.Eggnog.F
FortinetW32/Eggnog.E!worm
AVGWin32:WormX-gen [Wrm]
DeepInstinctMALICIOUS

How to remove Worm:Win32/Eggnog!pz?

Worm:Win32/Eggnog!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment