Malware

Nemesis.1534 removal guide

Malware Removal

The Nemesis.1534 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Nemesis.1534 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Nemesis.1534?


File Info:

crc32: 9ACC3E5F
md5: 7a4ebd1cef6f3e6f6e8d333eed88f9a7
name: 7A4EBD1CEF6F3E6F6E8D333EED88F9A7.mlw
sha1: 25d19b92642d009cf15c2f605626edbecd2f1e33
sha256: d9a4ec725c94cafab9a184ac87c556d6f728256c56f72d9b410b46618d2a0dbb
sha512: 23884630ad78bff18dd3a8265e0176678ba93f6d411dcde49713dda38a6bd6fea7cf62cd2ab019d136760dfb4be56fddacd508003a88da1ee1f2dccfc78ac4cc
ssdeep: 6144:8Qq+mDKFO7/w+HmUgLExDWV6s1N8H4Xu2jJc6p:TmDKFUrHmNLIs1N6Gu2jJPp
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Nemesis.1534 also known as:

K7AntiVirusTrojan ( 0052eef11 )
DrWebTrojan.Loader.834
CynetMalicious (score: 100)
ALYacGen:Variant.Nemesis.1534
SangforSpyware.Win32.Noon.gen
AlibabaTrojanSpy:Win32/Lokibot.ad12e3dd
K7GWTrojan ( 0052eef11 )
CyrenW32/Ninjector.J.gen!Camelot
SymantecPacked.Generic.610
ESET-NOD32Win32/Formbook.AA
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Spy.Win32.Noon.gen
BitDefenderGen:Variant.Nemesis.1534
MicroWorld-eScanTrojan.GenericKD.46456344
Ad-AwareTrojan.GenericKD.46456344
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.NOON.USMANF721
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
FireEyeTrojan.GenericKD.46456344
EmsisoftGen:Variant.Nemesis.1534 (B)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Trojan.Gen
MicrosoftTrojan:Win32/Lokibot.KZ!MTB
GDataWin32.Trojan-Stealer.FormBook.MDJTZR
McAfeeArtemis!7A4EBD1CEF6F
MAXmalware (ai score=81)
TrendMicro-HouseCallTrojanSpy.Win32.NOON.USMANF721
RisingTrojan.Injector/NSIS!1.D6F5 (CLASSIC)
FortinetNSIS/Ninjector.J!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Nemesis.1534?

Nemesis.1534 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment