AIT:Trojan.Nymeria.4970 removal tips

The AIT:Trojan.Nymeria.4970 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AIT:Trojan.Nymeria.4970 virus can do?

Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine AIT:Trojan.Nymeria.4970?


File Info:
crc32: E8757745
md5: 10d3c092e6bdfd94e367864b1b31ff39
name: 10D3C092E6BDFD94E367864B1B31FF39.mlw
sha1: 1381c282c60e545c90dfeccf79b3fa119233d0f3
sha256: 20da2c873126450b27d7922493806995f4d948f9e1fe5c2411e91648d75b4af0
sha512: 5e583f22c7a6debf982f5f2497397580565dda1775a03707583c52a322bd2f45960079f2dc28a0a2128bb4d777c0116ea8923fb675246553b3a551af0769e182
ssdeep: 98304:JSFx8n2RxFnHnzDpJJkbhtPRIA5jvPXp693NUBNmew:IFS+xxnPpMbDi6jvPXY93N9ew
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright xa9 2010 - 2016 error-soft.net
FileVersion: 0.1.99.59
FileDescription: SBot AC
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.4970 also known as:

K7AntiVirus	Trojan ( 0055e3991 )
DrWeb	Win32.HLLW.Autohit.17693
Cynet	Malicious (score: 100)
ALYac	AIT:Trojan.Nymeria.4970
Cylance	Unsafe
Alibaba	Packed:Win32/Layrui.dc1cd416
K7GW	Trojan ( 0055e3991 )
Cybereason	malicious.2e6bdf
Symantec	SecurityRisk.gen1
ESET-NOD32	Win32/Packed.Autoit.C.Gen suspicious
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Autoit-142
BitDefender	AIT:Trojan.Nymeria.4970
NANO-Antivirus	Trojan.Win32.Autohit.fivgav
MicroWorld-eScan	AIT:Trojan.Nymeria.4970
Ad-Aware	Gen:Variant.Strictor.106315
Sophos	Generic PUA BD (PUA)
McAfee-GW-Edition	BehavesLike.Win32.BadFile.wc
FireEye	AIT:Trojan.Nymeria.4970
Emsisoft	AIT:Trojan.Nymeria.4970 (B)
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASCommon.168
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	AIT:Trojan.Nymeria.D136A
GData	Gen:Variant.Strictor.106315
McAfee	Artemis!10D3C092E6BD
VBA32	Trojan.Autoit.F
Malwarebytes	Malware.AI.2000921045
Yandex	Worm.Autoit.Gen
Ikarus	Backdoor.Win32.Layrui
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove AIT:Trojan.Nymeria.4970?

AIT:Trojan.Nymeria.4970 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X