Author Topic: Eggs New.exe  (Read 6355 times)

0 Members and 1 Guest are viewing this topic.

:::Vuk:::

  • Guest
Eggs New.exe
« on: November 28, 2005, 01:27:26 AM »
I have this app running on my comp and its taking up around 40 000K of memory on my pretty slow computer. It has not caused any serious problems, but it still seems a bit suspicious to me. I have looked all over the internet for information but could not find anytihng, it is never even mentioned. Can anyone help me find out what Eggs New.exe is?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Eggs New.exe
« Reply #1 on: November 28, 2005, 02:13:23 AM »
Download Process Guard from www.sysinternals.com
It works like Task Manager (Ctrl+Alt+Del) but will tell you where is the executable of this file, more info about it and will allow us to give you a better help.
Maybe a full antispyware scan won't hurt, on contrary...

WinPatrol Program Information
 
Eggs new.exe Not Found

The program you requested was not found in our database.
This doesn't necessarily mean you should remove this program. It just indicates it hasn't been included in our database yet. We work hard to update our database with programs which are requested and not found and new programs are added daily.
We now have a record that someone has requested information on this program so we will do some research and update our records as quickly as possible.
As you might guess we do give priority to the more popular requests of the week. We also work on those programs which may be considered dangerous before we add information on safe programs or services which are commonly found.
If the program your looking at doesn't include a company name or version number we recommend caution.
If the filename is made up of random characters like PDQDLIXKF.DLL or WINKaghye.exe we recommend you disable this program and reboot. If you have tried disabling the program and it keeps returning see the trick at the bottom of this page.
The best things in life are free.

Spiritsongs

  • Guest
Re: Eggs New.exe
« Reply #2 on: November 28, 2005, 09:03:10 AM »
 :) I think I have heard of a SPYWARE with "new" in its name;
    that spyware is difficult to remove, therefore, I recommend
    you ask for help in the forums of your antiSPYWARE
    provider  .
« Last Edit: December 03, 2005, 05:09:58 AM by Spiritsongs »

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Eggs New.exe
« Reply #3 on: November 28, 2005, 10:25:11 AM »
Can you tell us what the file/process name is exactly- it should be one charcter string. ie, without any spaces? Is it eggsnew.exe?
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Eggs New.exe
« Reply #4 on: November 28, 2005, 10:17:29 PM »
Hi ===Vuk===,

Is this any where related to your find:
http://www.coresecurity.com/products/coreimpact/impact5-2005-oct28-1.php

greets,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

:::Vuk:::

  • Guest
Re: Eggs New.exe
« Reply #5 on: November 29, 2005, 12:53:10 AM »
Can you tell us what the file/process name is exactly- it should be one charcter string. ie, without any spaces? Is it eggsnew.exe?
no, it is Eggs New.exe and i have found the file Eggs New.exe in
C:\Documents and Settings\All Users\Application Data\Inside nurb wave bolt
and in that same folder there are a few  other suspicious sounding files. This is so wierd...i cant find anything on any of them.
Heck Boob.exe
HOLE BUILD.exe
phone readme.exe
Remote Boob.exe
wipe hide.exe

and no polonus, the link u gave me is not it.

i installed PC Lighthouse and blocked the process just in case. thank you all. I wanted to send the file to someone who works for Avast, or has ways of analysing this file, does any1 here know how i could do that?

galooma

  • Guest
Re: Eggs New.exe
« Reply #6 on: November 29, 2005, 01:28:26 AM »
you can submit the file to virus@avast.com in a password protected zip file using VIRUS as the password.
It has to be p,word protected otherwise it might be picked up and rejected by a scanner along the way.
include a reference to this thread and a brief description of your suspicions.

:::Vuk:::

  • Guest
Re: Eggs New.exe
« Reply #7 on: November 29, 2005, 02:14:03 AM »
thank you i will do that

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Eggs New.exe
« Reply #8 on: November 29, 2005, 09:28:15 AM »
Funny, I've never seen a running process with a space in its name. A Google search reveals that Eggs New.exe has been found to be part of Swizzor Trojan downloader.

Apparently, Trend Micro Housecall will find and remove it:

http://housecall.trendmicro.com/

Ewido and a-Squared anti-Trojan programs are also worth a try:

http://www.ewido.net/en/

http://www.emsisoft.com/en/

     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

galooma

  • Guest
Re: Eggs New.exe
« Reply #9 on: November 29, 2005, 09:41:54 AM »
great job fwf  you are an absolute bloodhound . i gave it a try yesterday but it got the better of me. ;D

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Eggs New.exe
« Reply #10 on: November 29, 2005, 09:47:09 AM »
Just needed some "double-quotes" when Googling.  ;)
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog