AIT:Trojan.Nymeria.3126 removal

The AIT:Trojan.Nymeria.3126 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.3126 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Presents an Authenticode digital signature
Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Creates a hidden or system file
Creates a copy of itself
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine AIT:Trojan.Nymeria.3126?


File Info:
crc32: 12FE7C5C
md5: f99d848a7328ab78b7946359429e5cbf
name: 77.exe
sha1: f4574d94e6e57eeb90c7e579081beeea6575fc00
sha256: 7ca20c8aa01ff2256f9e0a6fddaba1fbf4f1ff7921da5dba81dc08174c388104
sha512: 993189f9adc60978ef8b5f50f44a1e31349efe36d53bce1300028017764f1356d7d51fab1961f3a2c95cac902feefad954a9829a0985de35fb27967ae3e0d143
ssdeep: 49152:hh+ZkldoPK8YaocrmmupWtMKy0TFFTMGxanoHdbD8iQn1uW8F:C2cPK8fhupWygD1KiQQ7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.3126 also known as:

MicroWorld-eScan	AIT:Trojan.Nymeria.3126
FireEye	AIT:Trojan.Nymeria.3126
BitDefender	AIT:Trojan.Nymeria.3126
Cybereason	malicious.4e6e57
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.Autoit.FAU
GData	AIT:Trojan.Nymeria.3126
Kaspersky	Trojan.Win32.Inject.amrqh
Endgame	malicious (high confidence)
F-Secure	Dropper.DR/AutoIt.Gen8
Trapmine	suspicious.low.ml.score
Emsisoft	AIT:Trojan.Nymeria.3126 (B)
Webroot	W32.Malware.Gen
Avira	DR/AutoIt.Gen8
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	AIT:Trojan.Nymeria.DC36
ZoneAlarm	Trojan.Win32.Inject.amrqh
Acronis	suspicious
MAX	malware (ai score=82)
Yandex	Trojan.AvsArher.bS7elO
eGambit	PE.Heur.InvalidSig
MaxSecure	Trojan.Malware.300983.susgen

How to remove AIT:Trojan.Nymeria.3126?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

AIT:Trojan.Nymeria.3126 removal