About “Nemesis.10006 (B)” infection

The Nemesis.10006 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Nemesis.10006 (B) virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Nemesis.10006 (B)?


File Info:
name: 2BB296BB59C14ADBA4FA.mlw
path: /opt/CAPEv2/storage/binaries/353a2f699c0e855f877bdcb7e2d6741dfef0a01bd268cecf7b6dd1895eab2b76
crc32: B9FC414E
md5: 2bb296bb59c14adba4faec8276c24ad8
sha1: 738bd96e8424fb05519fefd979731334a8a5c9bf
sha256: 353a2f699c0e855f877bdcb7e2d6741dfef0a01bd268cecf7b6dd1895eab2b76
sha512: beeaf7182addcb45997bee3292e8d68a30b513244e186e0fab7ba8cb90c5a38f0c3888bcf7577c4a432430409cc77348ddf128e4e45cdcf33097c48b31a3fd93
ssdeep: 6144:7B+pgUbJWCA63R5SvlnwOicP4E2w8bNBdSyG4J:7g9J3rSPi8y7J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2648D45B268E48BD51B1AF6E8CB933035677CDD86A1270B338AB33F3473152159E62E
sha3_384: 55d3268ea7c5993f9807814408e7a4656c050e3a505991dfa1e1648a274db2d09fca0b12e1c0a78504ea35e6b4b15193
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2016-07-25 00:55:51

Version Info:
0: [No Data]

Nemesis.10006 (B) also known as:

MicroWorld-eScan	Trojan.GenericKD.61350300
FireEye	Trojan.GenericKD.61350300
ALYac	Gen:Variant.Nemesis.10006
VIPRE	Gen:Variant.Nemesis.10006
CrowdStrike	win/malicious_confidence_60% (W)
Elastic	malicious (moderate confidence)
ESET-NOD32	NSIS/Injector.ASH
Kaspersky	HEUR:Trojan.Win32.Guloader.gen
BitDefender	Trojan.GenericKD.61350300
Avast	NSIS:InjectorX-gen [Trj]
F-Secure	Trojan.TR/AD.Nekark.zstvf
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Nemesis.10006 (B)
GData	Gen:Variant.Nemesis.10006
Google	Detected
Avira	TR/AD.Nekark.zstvf
Arcabit	Trojan.Nemesis.D2716
ZoneAlarm	HEUR:Trojan.Win32.Guloader.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!2BB296BB59C1
MAX	malware (ai score=87)
Ikarus	Trojan.NSIS.Guloader
AVG	NSIS:InjectorX-gen [Trj]

How to remove Nemesis.10006 (B)?

Nemesis.10006 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X