Categories: Malware

Nemesis.1798 removal tips

The Nemesis.1798 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Nemesis.1798 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Nemesis.1798?


File Info:
crc32: 58781527md5: 39da7ab7a964862e9005e9e38d9c7568name: 39DA7AB7A964862E9005E9E38D9C7568.mlwsha1: a6f3272474f2acd2c689b9bba2a628973b3288a4sha256: 1d31ca7813368677503404743df9e8d103a3fc6b064315ba14f01667f6220eadsha512: 52ba46844c9fe51a6c202b539fa3fcb52c675f1549d1086c95172ccdfb23bcd6343c84fa1e399d97414009168c5487441759fecbb4c9d6dc3a9633382b92745dssdeep: 6144:s8LxBL/KZAJg7tMnyGL+Nz7iDUzR+BlyBSkK8dx4YNcrT:PiZDunVy7iA1+ryHOrTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Nemesis.1798 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
BitDefender	Gen:Variant.Nemesis.1798
Cybereason	malicious.7a9648
Cyren	W32/Injector.AOJ.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EQLH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Zapchast.gen
MicroWorld-eScan	Gen:Variant.Nemesis.1798
BitDefenderTheta	Gen:NN.ZedlaF.34236.fq4@auPiLAmi
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
FireEye	Generic.mg.39da7ab7a964862e
Emsisoft	Gen:Variant.Nemesis.1798 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Zum.Androm.1
MAX	malware (ai score=80)
Ikarus	Trojan.NSIS.Agent
Fortinet	W32/Injector.EQKA!tr
Paloalto	generic.ml