Trojan

AIT:Trojan.Nymeria.3126 (B) information

Malware Removal

The AIT:Trojan.Nymeria.3126 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AIT:Trojan.Nymeria.3126 (B) virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Collects information to fingerprint the system

How to determine AIT:Trojan.Nymeria.3126 (B)?


File Info:

crc32: BBFF2A08
md5: ed77085f30b0704db7755e7eed0c7ec0
name: asdfg.exe
sha1: 63d9101b8c738a0dcd2acf1836d6e36bbd704dfb
sha256: 1fd03372a7fbc512861c50f1a9faf80cb3b9b9cd6716c18040fcf4c3f2cfd983
sha512: 11bcb3ef7556c3d6621aca1fad7d9f436220778e1fdd0d40939ead587e40b401b1a60016f08eda50d29398435cf8fbea9576dea8dec7b4fdf38d4647c2601934
ssdeep: 24576:8AHnh+eWsN3skA4RV1Hom2KXMmHaR88wQPjRBVnNg5:bh+ZkldoPK8YaREQDVQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.3126 (B) also known as:

MicroWorld-eScanAIT:Trojan.Nymeria.3126
FireEyeGeneric.mg.ed77085f30b0704d
Qihoo-360Win32/Trojan.PSW.7ed
McAfeeArtemis!ED77085F30B0
CylanceUnsafe
SangforMalware
K7AntiVirusPassword-Stealer ( 0052f9a71 )
BitDefenderAIT:Trojan.Nymeria.3126
K7GWPassword-Stealer ( 0052f9a71 )
CrowdStrikewin/malicious_confidence_80% (W)
F-ProtW32/Autoit.G.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
GDataAIT:Trojan.Nymeria.3126
KasperskyTrojan-PSW.Win32.Azorult.alco
AegisLabTrojan.Win32.Azorult.i!c
Endgamemalicious (high confidence)
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1045962
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
EmsisoftAIT:Trojan.Nymeria.3126 (B)
IkarusWin32.Outbreak
CyrenW32/Autoit.G.gen!Eldorado
AviraHEUR/AGEN.1045962
MicrosoftTrojan:Win32/Occamy.C
ArcabitAIT:Trojan.Nymeria.DC36
ZoneAlarmTrojan-PSW.Win32.Azorult.alco
MAXmalware (ai score=87)
MalwarebytesBackdoor.NetWiredRC.AutoIt.Generic
PandaTrj/CI.A
ESET-NOD32Win32/PSW.Delf.OSF
TrendMicro-HouseCallTROJ_GEN.R057H0DBA20
TencentWin32.Trojan-qqpass.Qqrob.Amvv
YandexTrojan.AvsArher.bS9LKk
eGambitUnsafe.AI_Score_98%
FortinetW32/Delf.OSF!tr.pws
AVGWin32:Trojan-gen
Paloaltogeneric.ml
MaxSecureTrojan.Malware.300983.susgen

How to remove AIT:Trojan.Nymeria.3126 (B)?

AIT:Trojan.Nymeria.3126 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment