- Can't be uninstalled via Control Panel
- Installs itself without permissions
- Connects to the internet without permission
- Slow internet connection
Nymaim is a ransomware application that denies desktop access and hopes you will pay a ransom fee. The fee is said to be necessary in order to avoid criminal charges and to unlock your computer. As you can see, Nymaim is very similar to FBI MoneyPak virus and other ransomware applications. It has the same implications and you also use the same instructions to restore your desktop access (you can find them below this article). However, our security researchers warn that it is important to remove Nymaim all at once, because if any files are left behind, the infection might be restored automatically.
When you get infected with Nymaim, you are displayed a screen-sized notification which claims that you have violated national and international laws on cyber security. To avoid being charged you need to pay $300 via MoneyPak, Ukash or PaySafeCard alternative payment systems. Such alternative payment systems are not related to malware, but they can be used by cyber criminals to collect their payments. They also allow Nymaim to target a wide audience, because MoneyPak and similar alternative payment systems do not require credit cards. However, it goes without saying that you cannot send a single cent to the people behind Nymaim, because this way your problem will not be solved.
You most probably have been infected with Nymaim via Trojan infection. Trojan.Nymaim has been first detected last January and some security researchers say that it might be related to CryptoLocker malware as well. However, based on our research, according to the file size and file content Nymaim is no more different from other ransomware applications from Ukash group. However, this application may add RunOnce key into the registry which is not common among other Ukash infections. Not to mention that it can create a lot more files with different names and extensions. That is the main different between Nymaim and other ransomware applications, but other than the infection’s behavior is almost the same.
Due to the fact that Nymaim has a lot more files, it is necessary to remove them completely, because if there is at least one file remaining you may soon experience the infection symptoms again. To terminate Nymaim you need to unlock your computer and then delete all the malware files and registry entries. It is a rather difficult task, especially if you are not an experienced computer user, but you can achieve that by investing in a licensed computer security application.
Please refer to the instructions below in order to unlock your desktop. Should you have any further questions on Nymaim and its removal, do not hesitate to leave us a comment below.
How to unlock my computer
Windows Vista & Windows 7
How to manually remove Nymaim
Files associated with Nymaim infection: