Nemesis.10849 information

The Nemesis.10849 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Nemesis.10849 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine Nemesis.10849?


File Info:
name: CB364D1F38ACFD872980.mlw
path: /opt/CAPEv2/storage/binaries/6191e635a85a6e0473a4b5bbaee97873ecc370a38fdd0689b8e02e1da71a71ca
crc32: AB669D31
md5: cb364d1f38acfd87298035490926c23d
sha1: 2efa63c55fb469b3399d9430787db2c5fb197200
sha256: 6191e635a85a6e0473a4b5bbaee97873ecc370a38fdd0689b8e02e1da71a71ca
sha512: 3c8c75bc93d5be4b161900e6a09d6fe02e02c7ca04c3c6454035036a23a759d08f8564ea2793facb38604b1da37ac06ce774f0f0a7d6d250240636c1a417d23d
ssdeep: 3072:btb/CLp6B5PdcSoZIUqqqqqIqqRPHiPzbXUa8ITkWY+MAsBuhewb0NVdoyncDocj:btPAPHi/XUaNnY+4eQNvJNc4EkMjjXlF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F114F1C1A3C0F057EE73E8F50FB3ABA45B3ADC695606551363C437168936A53AA3E203
sha3_384: b7886fafd98edd4b1714d884a545a66a75bb8487ccaf2662b5f9db2fc1c1f02a3cb565dd30de5621ba8e68bbf61f3a68
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2016-07-25 00:55:27

Version Info:
ProductName: Hasbro Inc.
ProductVersion: 2.4.0.0
Translation: 0x0409 0x04e4

Nemesis.10849 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Nemesis.10849
FireEye	Generic.mg.cb364d1f38acfd87
McAfee	Artemis!CB364D1F38AC
VIPRE	Gen:Variant.Nemesis.10849
BitDefender	Gen:Variant.Nemesis.10849
CrowdStrike	win/malicious_confidence_70% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	NSIS/Injector.BIA
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Guloader.gen
Cynet	Malicious (score: 99)
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.AdwareDotDo.cc
Emsisoft	Gen:Variant.Nemesis.10849 (B)
Avira	TR/Injector.pugah
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Nemesis.10849
ALYac	Gen:Variant.Nemesis.10849
MAX	malware (ai score=86)
Cylance	Unsafe
Panda	Trj/Agent.ALS
Yandex	Trojan.Igent.bYKvTC.3
Fortinet	W32/BIA!tr
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]

How to remove Nemesis.10849?

Nemesis.10849 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X