Eggs New.exe

[:::Vuk:::]

I have this app running on my comp and its taking up around 40 000K of memory on my pretty slow computer. It has not caused any serious problems, but it still seems a bit suspicious to me. I have looked all over the internet for information but could not find anytihng, it is never even mentioned. Can anyone help me find out what Eggs New.exe is?

[Lisandro]

Download Process Guard from www.sysinternals.com
It works like Task Manager (Ctrl+Alt+Del) but will tell you where is the executable of this file, more info about it and will allow us to give you a better help.
Maybe a full antispyware scan won't hurt, on contrary...

WinPatrol Program Information
 
Eggs new.exe Not Found

The program you requested was not found in our database.
This doesn't necessarily mean you should remove this program. It just indicates it hasn't been included in our database yet. We work hard to update our database with programs which are requested and not found and new programs are added daily.
We now have a record that someone has requested information on this program so we will do some research and update our records as quickly as possible.
As you might guess we do give priority to the more popular requests of the week. We also work on those programs which may be considered dangerous before we add information on safe programs or services which are commonly found.
If the program your looking at doesn't include a company name or version number we recommend caution.
If the filename is made up of random characters like PDQDLIXKF.DLL or WINKaghye.exe we recommend you disable this program and reboot. If you have tried disabling the program and it keeps returning see the trick at the bottom of this page.

[Spiritsongs]

  I think I have heard of a SPYWARE with "new" in its name;
    that spyware is difficult to remove, therefore, I recommend
    you ask for help in the forums of your antiSPYWARE
    provider  .

[FreewheelinFrank]

Can you tell us what the file/process name is exactly- it should be one charcter string. ie, without any spaces? Is it eggsnew.exe?

[polonus]

Hi ===Vuk===,

Is this any where related to your find:
http://www.coresecurity.com/products/coreimpact/impact5-2005-oct28-1.php

greets,

polonus

[:::Vuk:::]

Can you tell us what the file/process name is exactly- it should be one charcter string. ie, without any spaces? Is it eggsnew.exe?

no, it is Eggs New.exe and i have found the file Eggs New.exe in
C:\Documents and Settings\All Users\Application Data\Inside nurb wave bolt
and in that same folder there are a few  other suspicious sounding files. This is so wierd...i cant find anything on any of them.
Heck Boob.exe
HOLE BUILD.exe
phone readme.exe
Remote Boob.exe
wipe hide.exe

and no polonus, the link u gave me is not it.

i installed PC Lighthouse and blocked the process just in case. thank you all. I wanted to send the file to someone who works for Avast, or has ways of analysing this file, does any1 here know how i could do that?

[galooma]

you can submit the file to virus@avast.com in a password protected zip file using VIRUS as the password.
It has to be p,word protected otherwise it might be picked up and rejected by a scanner along the way.
include a reference to this thread and a brief description of your suspicions.

[:::Vuk:::]

thank you i will do that

[FreewheelinFrank]

Funny, I've never seen a running process with a space in its name. A Google search reveals that Eggs New.exe has been found to be part of Swizzor Trojan downloader.

Apparently, Trend Micro Housecall will find and remove it:

http://housecall.trendmicro.com/

Ewido and a-Squared anti-Trojan programs are also worth a try:

http://www.ewido.net/en/

http://www.emsisoft.com/en/

[galooma]

great job fwf  you are an absolute bloodhound . i gave it a try yesterday but it got the better of me.

[FreewheelinFrank]

Just needed some "double-quotes" when Googling.