Categories: Trojan

AIT:Trojan.Nymeria.4177 removal

The AIT:Trojan.Nymeria.4177 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.4177 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine AIT:Trojan.Nymeria.4177?


File Info:
name: D58A289B4B385B4EC1E5.mlwpath: /opt/CAPEv2/storage/binaries/16acda749390005716c5561afd9d2991be16714a9fee8d457f9ef586b5e771b3crc32: DF606704md5: d58a289b4b385b4ec1e51ba62f3ca945sha1: 4c3878e7c188636006991875aae47489162f0346sha256: 16acda749390005716c5561afd9d2991be16714a9fee8d457f9ef586b5e771b3sha512: 3ca25eaba458ace7665e7a0200cd000e479c7ea467875ed55c59603190774a553178659bd504a5e0368bef47c39175ed18963b891db8d39ec36b73ddd4c4bbf2ssdeep: 49152:DVg5tQ7aB775OBB69fNmHEbCdf/vk6763rqrx8KtDU6f8Di:Zg56vBBqlmkbCdf/vhyqrxzyDitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E0C5022373DE8364C3B15273BA557742AE7F782506B5F96B2FD8083DA820122525EB73sha3_384: 6b906266b4657c3669a0009ed1b644392fd76d60eebe65cffe83c7fa614535b6d52dfb3d437f9606a8e2cc6d019cf24bep_bytes: e86ace0000e97ffeffffcccc57568b74timestamp: 2014-10-22 01:51:39
Version Info:
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.4177 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Autoit.7!c
tehtris	Generic.Malware
MicroWorld-eScan	AIT:Trojan.Nymeria.4177
FireEye	Generic.mg.d58a289b4b385b4e
McAfee	Artemis!D58A289B4B38
Malwarebytes	Generic.Malware/Suspicious
VIPRE	AIT:Trojan.Nymeria.4177
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004d064a1 )
Alibaba	TrojanBanker:Win32/Injector.28cc1857
K7GW	Trojan ( 004d064a1 )
Cybereason	malicious.7c1886
BitDefenderTheta	AI:Packer.D41613D916
VirIT	Trojan.Win32.MultiDropper_c.AB
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	multiple detections
APEX	Malicious
Kaspersky	Trojan-Banker.Win32.Autoit.dq
BitDefender	AIT:Trojan.Nymeria.4177
NANO-Antivirus	Trojan.Script.Agent.debxaj
Avast	AutoIt:Injector-HL [Trj]
Tencent	Win32.Trojan-Banker.Autoit.Mjgl
Sophos	Mal/Generic-R
F-Secure	Dropper.DR/AutoIt.Gen
DrWeb	Trojan.DownLoader22.13393
TrendMicro	TROJ_BANLOAD.EJRH
McAfee-GW-Edition	BehavesLike.Win32.RealProtect.vc
Trapmine	malicious.moderate.ml.score
Emsisoft	AIT:Trojan.Nymeria.4177 (B)
Jiangmin	Trojan/Banker.AutoIt.ck
Webroot	W32.Malware.Gen
Google	Detected
Avira	DR/AutoIt.Gen
Antiy-AVL	Trojan[Banker]/Win32.Autoit
Xcitium	Malware@#2i2l5qt88su1y
Arcabit	AIT:Trojan.Nymeria.D1051 [many]
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	AIT:Trojan.Nymeria.4177 (2x)
Cynet	Malicious (score: 100)
VBA32	TrojanBanker.Autoit
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_BANLOAD.EJRH
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Autoit.BBF!tr
AVG	AutoIt:Injector-HL [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)