Malware

About “Nemesis.1659” infection

Malware Removal

The Nemesis.1659 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Nemesis.1659 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Nemesis.1659?


File Info:

crc32: 20183D5D
md5: 62bb7dadf1d8487d2bd745633136cf4b
name: 62BB7DADF1D8487D2BD745633136CF4B.mlw
sha1: 3bc04518b9671b7ed4e068e9ae7dd14c78746ccb
sha256: f1a3b9f25708d8add4a5200328941651c2e35c83170c8d51dcbfdfa91aeab4d6
sha512: 635b5250f8e5256fcb814d2f596a3fe8bf1094de3998ac18133c16f21dc31ba78fa1d3a42dd30e4e80fb7ae6d0ae8fc8cd9df5e102b9385a66fa0ad7838b87c8
ssdeep: 3072:iBkfJpRXATwMdFCcGb96DrxpCRv49ruwhcvSc1z77k8j0Vou+/xygxvMfK4aeGqA:iqjIK96pDowkJ37goumxXELavaHqp
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Nemesis.1659 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Injects.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Injector.2519063e
Cybereasonmalicious.df1d84
CyrenW32/Injector.AJP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.EPTG
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Injects.gen
BitDefenderGen:Variant.Nemesis.1659
MicroWorld-eScanGen:Variant.Nemesis.1659
SophosMal/Generic-S
TrendMicroTROJ_GEN.R002C0DGF21
McAfee-GW-EditionBehavesLike.Win32.Vopak.cc
FireEyeGeneric.mg.62bb7dadf1d8487d
EmsisoftGen:Variant.Nemesis.1659 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Script/Phonzy.B!ml
GDataWin32.Trojan.Agent.4WILCA
McAfeeRDN/Generic.tfr
MAXmalware (ai score=87)
VBA32Backdoor.Androm
MalwarebytesTrojan.Injector.Generic
TrendMicro-HouseCallTROJ_GEN.R002H0CGF21
YandexTrojan.Slntscn24.bVVB1s
IkarusTrojan.NSIS.Agent
FortinetW32/Injector.EOWC!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Inject.HyoDm4cA

How to remove Nemesis.1659?

Nemesis.1659 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment