Danger level 7
Type: Malware
Common infection symptoms:
  • Can't be uninstalled via Control Panel
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection

Nymaim

Nymaim is a ransomware application that denies desktop access and hopes you will pay a ransom fee. The fee is said to be necessary in order to avoid criminal charges and to unlock your computer. As you can see, Nymaim is very similar to FBI MoneyPak virus and other ransomware applications. It has the same implications and you also use the same instructions to restore your desktop access (you can find them below this article). However, our security researchers warn that it is important to remove Nymaim all at once, because if any files are left behind, the infection might be restored automatically.

When you get infected with Nymaim, you are displayed a screen-sized notification which claims that you have violated national and international laws on cyber security. To avoid being charged you need to pay $300 via MoneyPak, Ukash or PaySafeCard alternative payment systems. Such alternative payment systems are not related to malware, but they can be used by cyber criminals to collect their payments. They also allow Nymaim to target a wide audience, because MoneyPak and similar alternative payment systems do not require credit cards. However, it goes without saying that you cannot send a single cent to the people behind Nymaim, because this way your problem will not be solved.

You most probably have been infected with Nymaim via Trojan infection. Trojan.Nymaim has been first detected last January and some security researchers say that it might be related to CryptoLocker malware as well. However, based on our research, according to the file size and file content Nymaim is no more different from other ransomware applications from Ukash group. However, this application may add RunOnce key into the registry which is not common among other Ukash infections. Not to mention that it can create a lot more files with different names and extensions. That is the main different between Nymaim and other ransomware applications, but other than the infection’s behavior is almost the same.

Due to the fact that Nymaim has a lot more files, it is necessary to remove them completely, because if there is at least one file remaining you may soon experience the infection symptoms again. To terminate Nymaim you need to unlock your computer and then delete all the malware files and registry entries. It is a rather difficult task, especially if you are not an experienced computer user, but you can achieve that by investing in a licensed computer security application.

Please refer to the instructions below in order to unlock your desktop. Should you have any further questions on Nymaim and its removal, do not hesitate to leave us a comment below.

How to unlock my computer

Windows 8

  1. Press Windows key and wait for metro Start menu to show up.
  2. Click the built-in Internet Explorer tile.
  3. Enter http://www.pcthreat.com/download-sph into the address bar and press Enter.
  4. Click Run on the download dialog box and install SpyHunter.
  5. Scan your computer.

Windows Vista & Windows 7

  1. Restart your PC and press F8 repeatedly once BIOS screen disappears.
  2. If you see Windows logo show up, reboot the PC and try again.
  3. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
  4. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  5. Install the program and run a full system scan.

Windows XP

  1. Follow the steps above from 1 to 3.
  2. When Confirmation dialog box appears click Yes.
  3. Download SpyHunter.
  4. Open Start menu and launch Run.
  5. Enter msconfig into Open box and click OK.
  6. Select Startup tab on System Configuration Utilities.
  7. Click Disable all option and press OK to save changes.
  8. Restart the PC in Normal Mode.
  9. Install SpyHunter and launch a full system scan.
Download Spyware Removal Tool to Remove* Nymaim
  • Quick & tested solution for Nymaim removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Nymaim

Files associated with Nymaim infection:

drain-33.exe
buoyancy-07.exe
robonaut-78.exe
photon-83.exe
docsis-00.exe
lever-61.exe
bending-4.exe
framers-64.exe
algae-5.exe
tdmoip-9.exe
cardbus-4.exe
computer-7.exe
analog-17.exe
docsis-58.exe
circle-75.exe
amlcd-7.exe
switcher-39.exe
hardness-78.exe
analog-4.exe
robonaut-92.exe
computer-29.exe
hardness-5.exe
analogue-59.exe
scart-19.exe
tdmop-4.exe
photon-6.exe
median-7.exe
stress-1.exe
eprom-7.exe
biology-4.exe
buoyancy-8.exe
ycbcr-80.exe
maxton-6.exe
opamp-67.exe
lvecl-4.exe
click-26.exe
wimax-53.exe
jedec-52.exe
flywheel-60.exe
hoist-0.exe
haptic-14.exe
optics-75.exe
weber-65.exe
baseband-56.exe
tesla-75.exe
infrared-8.exe
snubber-66.exe
hotswap-3.exe
sound-9.exe
machine-1.exe
battery-85.exe
statics-5.exe
lever-3.exe
amlcd-32.exe
doublers-1.exe
tdscdma-3.exe
microlan-7.exe
sinad-73.exe
infrared-35.exe
opamp-3.exe
ammeter-13.exe
circle-1.exe
jedec-62.exe
parallel-0.exe
firewire-3.exe
baryon-36.exe
femto-35.exe
tweak-47.exe
strobe-68.exe
strobe-1.exe
handover-0.exe
photon-71.exe
optics-27.exe
onewire-6.exe
drypack-51.exe
pulley-8.exe
rs232-5.exe
dslam-3.exe
buoyancy-4.exe
ddram-41.exe
analogue-63.exe
anode-5.exe
cathode-2.exe
mesfet-29.exe
fluid-09.exe
servo-80.exe
bacteria-4.exe
analog-1.exe
tempco-9.exe
scart-82.exe
doublers-6.exe
ultra160-82.exe
hsupa-1.exe
floating-69.exe
wcdma-3.exe
tdmoip-1.exe
molality-3.exe
fission-7.exe
baryon-60.exe
glonass-15.exe

Nymaim processes to kill:

ycbcr-80.exe
bacteria-4.exe
tdmoip-1.exe
algae-5.exe
buoyancy-8.exe
rs232-5.exe
optics-27.exe
strobe-68.exe
molality-3.exe
opamp-67.exe
eprom-7.exe
amlcd-7.exe
robonaut-78.exe
click-26.exe
scart-82.exe
femto-35.exe
tdscdma-3.exe
jedec-52.exe
machine-1.exe
pulley-8.exe
photon-71.exe
snubber-66.exe
analog-17.exe
bending-4.exe
circle-75.exe
analogue-63.exe
ddram-41.exe
robonaut-92.exe
microlan-7.exe
servo-80.exe
infrared-35.exe
scart-19.exe
lever-3.exe
biology-4.exe
hardness-78.exe
switcher-39.exe
ammeter-13.exe
drain-33.exe
docsis-58.exe
median-7.exe
docsis-00.exe
parallel-0.exe
glonass-15.exe
tweak-47.exe
floating-69.exe
hotswap-3.exe
handover-0.exe
statics-5.exe
cathode-2.exe
computer-29.exe
framers-64.exe
photon-6.exe
doublers-6.exe
buoyancy-07.exe
wcdma-3.exe
analog-4.exe
infrared-8.exe
ultra160-82.exe
hardness-5.exe
sound-9.exe
maxton-6.exe
fluid-09.exe
doublers-1.exe
wimax-53.exe
tempco-9.exe
stress-1.exe
battery-85.exe
haptic-14.exe
hsupa-1.exe
mesfet-29.exe
jedec-62.exe
strobe-1.exe
dslam-3.exe
weber-65.exe
onewire-6.exe
opamp-3.exe
fission-7.exe
baryon-60.exe
lvecl-4.exe
drypack-51.exe
firewire-3.exe
buoyancy-4.exe
tdmoip-9.exe
photon-83.exe
computer-7.exe
tdmop-4.exe
sinad-73.exe
analog-1.exe
flywheel-60.exe
amlcd-32.exe
hoist-0.exe
lever-61.exe
optics-75.exe
baryon-36.exe
anode-5.exe
cardbus-4.exe
analogue-59.exe
baseband-56.exe
circle-1.exe
tesla-75.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.