AIT:Trojan.Nymeria.4209 removal guide

The AIT:Trojan.Nymeria.4209 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.4209 virus can do?

• Injection (inter-process)
• Injection (Process Hollowing)
• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Executed a process and injected code into it, probably while unpacking
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Anomalous binary characteristics

Related domains:

How to determine AIT:Trojan.Nymeria.4209?

File Info:
crc32: 459B5F8A
md5: 5cd3a65d1ccd3dd6f8a228d51bb92ca1
name: 5CD3A65D1CCD3DD6F8A228D51BB92CA1.mlw
sha1: 6b6b775667dde58d46ac05000b20533376d6cad6
sha256: 6a1596ce289040d5b9ca8f981f965531d512a48a1a3ef5f7f8f9b8a4d9f05c3d
sha512: dc3377500ffb67dac4194ea9587f0b0ab584554cf2e5266aae37d5c22400310a23bc9e5e54eec797d15dbaa9e49c4aa7d9f1aa5c62b470bc15ca1e88bc2aade6
ssdeep: 12288:jhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aeY+V:pRmJkcoQricOIQxiZY1ia7y
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription: 
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.4209 also known as:

How to remove AIT:Trojan.Nymeria.4209?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.