Danger level 7
Type: Malware
Common infection symptoms:
  • Can't be uninstalled via Control Panel
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection

Nymaim

Nymaim is a ransomware application that denies desktop access and hopes you will pay a ransom fee. The fee is said to be necessary in order to avoid criminal charges and to unlock your computer. As you can see, Nymaim is very similar to FBI MoneyPak virus and other ransomware applications. It has the same implications and you also use the same instructions to restore your desktop access (you can find them below this article). However, our security researchers warn that it is important to remove Nymaim all at once, because if any files are left behind, the infection might be restored automatically.

When you get infected with Nymaim, you are displayed a screen-sized notification which claims that you have violated national and international laws on cyber security. To avoid being charged you need to pay $300 via MoneyPak, Ukash or PaySafeCard alternative payment systems. Such alternative payment systems are not related to malware, but they can be used by cyber criminals to collect their payments. They also allow Nymaim to target a wide audience, because MoneyPak and similar alternative payment systems do not require credit cards. However, it goes without saying that you cannot send a single cent to the people behind Nymaim, because this way your problem will not be solved.

You most probably have been infected with Nymaim via Trojan infection. Trojan.Nymaim has been first detected last January and some security researchers say that it might be related to CryptoLocker malware as well. However, based on our research, according to the file size and file content Nymaim is no more different from other ransomware applications from Ukash group. However, this application may add RunOnce key into the registry which is not common among other Ukash infections. Not to mention that it can create a lot more files with different names and extensions. That is the main different between Nymaim and other ransomware applications, but other than the infection’s behavior is almost the same.

Due to the fact that Nymaim has a lot more files, it is necessary to remove them completely, because if there is at least one file remaining you may soon experience the infection symptoms again. To terminate Nymaim you need to unlock your computer and then delete all the malware files and registry entries. It is a rather difficult task, especially if you are not an experienced computer user, but you can achieve that by investing in a licensed computer security application.

Please refer to the instructions below in order to unlock your desktop. Should you have any further questions on Nymaim and its removal, do not hesitate to leave us a comment below.

How to unlock my computer

Windows 8

  1. Press Windows key and wait for metro Start menu to show up.
  2. Click the built-in Internet Explorer tile.
  3. Enter http://www.pcthreat.com/download-sph into the address bar and press Enter.
  4. Click Run on the download dialog box and install SpyHunter.
  5. Scan your computer.

Windows Vista & Windows 7

  1. Restart your PC and press F8 repeatedly once BIOS screen disappears.
  2. If you see Windows logo show up, reboot the PC and try again.
  3. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
  4. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  5. Install the program and run a full system scan.

Windows XP

  1. Follow the steps above from 1 to 3.
  2. When Confirmation dialog box appears click Yes.
  3. Download SpyHunter.
  4. Open Start menu and launch Run.
  5. Enter msconfig into Open box and click OK.
  6. Select Startup tab on System Configuration Utilities.
  7. Click Disable all option and press OK to save changes.
  8. Restart the PC in Normal Mode.
  9. Install SpyHunter and launch a full system scan.
Download Spyware Removal Tool to Remove* Nymaim
  • Quick & tested solution for Nymaim removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Nymaim

Files associated with Nymaim infection:

fission-7.exe
drypack-51.exe
fluid-09.exe
stress-1.exe
strobe-1.exe
doublers-1.exe
hardness-5.exe
robonaut-78.exe
baryon-36.exe
baryon-60.exe
firewire-3.exe
photon-6.exe
cardbus-4.exe
circle-1.exe
haptic-14.exe
weber-65.exe
algae-5.exe
analog-1.exe
biology-4.exe
ddram-41.exe
infrared-35.exe
docsis-58.exe
hotswap-3.exe
opamp-67.exe
eprom-7.exe
scart-82.exe
buoyancy-4.exe
dslam-3.exe
bacteria-4.exe
bending-4.exe
wcdma-3.exe
machine-1.exe
ammeter-13.exe
drain-33.exe
molality-3.exe
statics-5.exe
tempco-9.exe
computer-29.exe
amlcd-32.exe
opamp-3.exe
photon-83.exe
jedec-62.exe
tweak-47.exe
hardness-78.exe
buoyancy-8.exe
baseband-56.exe
sound-9.exe
onewire-6.exe
click-26.exe
floating-69.exe
robonaut-92.exe
mesfet-29.exe
photon-71.exe
median-7.exe
pulley-8.exe
tesla-75.exe
optics-27.exe
tdscdma-3.exe
analog-4.exe
framers-64.exe
rs232-5.exe
flywheel-60.exe
scart-19.exe
glonass-15.exe
ultra160-82.exe
lvecl-4.exe
analog-17.exe
tdmoip-1.exe
docsis-00.exe
hsupa-1.exe
wimax-53.exe
doublers-6.exe
ycbcr-80.exe
jedec-52.exe
parallel-0.exe
amlcd-7.exe
circle-75.exe
analogue-59.exe
hoist-0.exe
lever-3.exe
handover-0.exe
optics-75.exe
infrared-8.exe
maxton-6.exe
battery-85.exe
sinad-73.exe
femto-35.exe
tdmoip-9.exe
anode-5.exe
buoyancy-07.exe
microlan-7.exe
lever-61.exe
analogue-63.exe
snubber-66.exe
computer-7.exe
cathode-2.exe
switcher-39.exe
tdmop-4.exe
strobe-68.exe
servo-80.exe

Nymaim processes to kill:

hardness-5.exe
tdmop-4.exe
photon-71.exe
mesfet-29.exe
rs232-5.exe
buoyancy-8.exe
tdmoip-9.exe
infrared-35.exe
buoyancy-4.exe
circle-75.exe
anode-5.exe
framers-64.exe
drypack-51.exe
wimax-53.exe
statics-5.exe
handover-0.exe
sinad-73.exe
servo-80.exe
analog-4.exe
tempco-9.exe
microlan-7.exe
robonaut-92.exe
doublers-6.exe
onewire-6.exe
cardbus-4.exe
analog-17.exe
wcdma-3.exe
optics-27.exe
firewire-3.exe
floating-69.exe
opamp-3.exe
infrared-8.exe
robonaut-78.exe
pulley-8.exe
strobe-68.exe
hoist-0.exe
buoyancy-07.exe
analogue-59.exe
parallel-0.exe
femto-35.exe
baryon-36.exe
battery-85.exe
tdmoip-1.exe
strobe-1.exe
jedec-62.exe
machine-1.exe
lever-61.exe
bacteria-4.exe
lvecl-4.exe
fluid-09.exe
scart-19.exe
amlcd-7.exe
snubber-66.exe
median-7.exe
opamp-67.exe
click-26.exe
docsis-00.exe
circle-1.exe
photon-83.exe
algae-5.exe
computer-29.exe
scart-82.exe
haptic-14.exe
tdscdma-3.exe
baryon-60.exe
stress-1.exe
amlcd-32.exe
analog-1.exe
sound-9.exe
photon-6.exe
analogue-63.exe
ycbcr-80.exe
baseband-56.exe
ammeter-13.exe
dslam-3.exe
jedec-52.exe
biology-4.exe
hardness-78.exe
fission-7.exe
hsupa-1.exe
bending-4.exe
weber-65.exe
lever-3.exe
hotswap-3.exe
tesla-75.exe
cathode-2.exe
ultra160-82.exe
switcher-39.exe
optics-75.exe
docsis-58.exe
ddram-41.exe
drain-33.exe
doublers-1.exe
computer-7.exe
eprom-7.exe
molality-3.exe
maxton-6.exe
tweak-47.exe
flywheel-60.exe
glonass-15.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.