AIT:Trojan.Nymeria.2310 (file analysis)

The AIT:Trojan.Nymeria.2310 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.2310 virus can do?

• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• At least one IP Address, Domain, or File Name was found in a crypto call
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Attempts to create or modify system certificates

Related domains:

How to determine AIT:Trojan.Nymeria.2310?

File Info:
crc32: 3FAF276F
md5: 18d745715013b913bc8f23d83608d527
name: 18D745715013B913BC8F23D83608D527.mlw
sha1: 9f1f474296321d60897be90a1e2f5705fd14bb52
sha256: 1d90140b1c151c50cb5b678e0cda4993ecd5cebe086c6d2853d701b733a41c43
sha512: ed155efe4a5f47d1c77ab6d464c0462a42e9bf2441287640ec13548326f7f0a53e7eaa00bd9f50433e3d25dfaceb25af712337446dcf196f33f4d041422ed205
ssdeep: 49152:kd0QQ3TN3wbZKFaiJrWQjvbmEm8o4sjeR:kaQQRqQFjr/bmEmLER
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: 
InternalName: auto_khan_32bit.exe
FileVersion: 0.0.1.5
CompanyName: 
ProductName: 
ProductVersion: 1.0.1.5
FileDescription: 
OriginalFilename: auto_khan_32bit.exe
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.2310 also known as:

How to remove AIT:Trojan.Nymeria.2310?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.