Categories: Malware

What is “Nemesis.26827”?

The Nemesis.26827 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Nemesis.26827 virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Uses Windows utilities for basic functionality
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings
Deletes executed files from disk
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities

How to determine Nemesis.26827?


File Info:
name: D8629E277CA56C1A31A9.mlwpath: /opt/CAPEv2/storage/binaries/7e270aa360dcd9cd96981659c25be3ad53fd907f439a4cc23f309c2e05481504crc32: 8D0F2EB6md5: d8629e277ca56c1a31a914e368d904f9sha1: b4fa2845b78ce51f4a995b861b98f2f8741e1e12sha256: 7e270aa360dcd9cd96981659c25be3ad53fd907f439a4cc23f309c2e05481504sha512: 8355a3056379e0a95c982117628bab33bbb120e76a456b45334beb8eea6e746244c78b5a1d1b91b38dafa52833bc28c8d7ce1974f650d7b4be9f6f5c6cdff9b3ssdeep: 3072:xqBFJLzgOJJ6oaAVa0fe+CUGXQV8HiKxh2pvF9:wPdZ1z9fvtGXQV8CyEf9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T140C3F16376D0995BEFAB4632417BCB39D7F78E2004125C4B87613EB73E352421A2A687sha3_384: fa8215f6f64044ca5fa10104444286a7d4a4fd016c8fa00e4fbec7b3c7a32179a3c7070f60a8f1eeed4828237c0c2336ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-06-18 21:33:12
Version Info:
0: [No Data]

Nemesis.26827 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.NSIS.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Nemesis.26827
FireEye	Gen:Variant.Nemesis.26827
Skyhigh	BehavesLike.Win32.GenDownloader.cc
ALYac	Gen:Variant.Nemesis.26827
Malwarebytes	Clicker.Trojan.Malicious.DDS
Zillya	Trojan.NSIS.Win32.7828
Sangfor	Downloader.NSIS.Clicker.Vas2
K7AntiVirus	Spyware ( 00246bf31 )
Alibaba	TrojanClicker:Win32/Snojan.7ea31399
K7GW	Spyware ( 00246bf31 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	NSIS/TrojanClicker.Agent.BQ.Gen
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.NSIS-35
Kaspersky	Trojan-Clicker.Win32.NSIS.bc
BitDefender	Gen:Variant.Nemesis.26827
NANO-Antivirus	Trojan.Nsis.Download.cqdjwn
Avast	NSIS:Agent-AT [Trj]
Tencent	Win32.Trojan.Nsis.Bujl
Emsisoft	Gen:Variant.Nemesis.26827 (B)
F-Secure	Trojan.TR/Agent.ank.3
DrWeb	Trojan.Click2.30715
VIPRE	Gen:Variant.Nemesis.26827
TrendMicro	TROJ_GEN.R002C0DJG23
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.adyzj
Webroot	W32.Trojan.Gen
Varist	W32/Agent.DTWQ-4713
Avira	TR/Agent.ank.3
Antiy-AVL	GrayWare[Downloader]/Win32.Adload.gen
Kingsoft	malware.kb.a.997
Arcabit	Trojan.Nemesis.D68CB
ZoneAlarm	Trojan-Clicker.Win32.NSIS.bc
GData	NSIS.Trojan.Clicker.D
Google	Detected
AhnLab-V3	Win-Trojan/NSIS.Gen
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=80)
VBA32	Trojan.MulDrop
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DJG23
Ikarus	Trojan-Downloader.Win32.NSIS
Fortinet	W32/Dloader.EP!tr.NSIS
AVG	NSIS:Agent-AT [Trj]
Cybereason	malicious.5b78ce
DeepInstinct	MALICIOUS