AIT:Trojan.Nymeria.32 removal guide

The AIT:Trojan.Nymeria.32 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.32 virus can do?

• Creates RWX memory
• Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
• The binary likely contains encrypted or compressed data.
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Network activity detected but not expressed in API logs
• Creates a copy of itself
• Anomalous binary characteristics

How to determine AIT:Trojan.Nymeria.32?

File Info:
crc32: 59999639
md5: 15381590e14d62d1ede6765861bad623
name: 15381590E14D62D1EDE6765861BAD623.mlw
sha1: 9a3ec6308bdd2ac4c74081ce71bd7a90c2ce8a0e
sha256: 5a53c0eceeb14c4483e185180addd37be870a1efa3a784ce271f215044659312
sha512: f3bd8055001ef5ff868140cf3c91b012f9cee8c16cf7fe7b89837f2e1fd3464f32d0caa58a0ca677197fbde450201f092d765935ea77dc450af849cb50f3c876
ssdeep: 24576:G3jC/5scl7w4xOMJ88EdeauEQpkP/R5ZDE4q9MmCS:IIvl7RxOMweafBXvbaPCS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 2.0.0.0
ProductVersion: 2.0.0.0
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.32 also known as:

How to remove AIT:Trojan.Nymeria.32?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.