Tool to clean Virus Nimnul.A/ Ramnit Infection from Memory and Files
Download the NimnulCleaner.zip
Download, extract and Execute the file NimnulCleaner.zip
Features of Nimnul Cleaner:
It closes handle of all malicious file running in memory.
It stops all unwanted process and prevent virus to spread while cleaning.
It cleans Nimnul infected PE files and Dll files.
Nimnul Virus Summary:
It infects PE, dll, .html files and spreads to removable drives.
It drops two file or may be one file
C:\Program Files\Microsoft\WaterMark.exe
C:\Program Files\Microsoft\DesktopLayer.exe
It also creates Random name folder to Program files folder and drops one file. The name of this file is random. It infects html files. In this type of infection it drops Svchost.exe in Windows Directory. It opens handle one of the above mentioned files into Svchost.exe Process. It adds this file names to following key in Registry.[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ Winlogon]Valu Name:UserinitValueData : C:\WINDOWS\system32\userinit.exe,C:\ProgramFiles\Microsoft\WaterMark.exe C:\Program Files\Microsoft\DesktopLayer.exe,C:\Program Files\Random name\Random name.exe Important Note : After completion of Nimnul Cleaner scanning, scan your PC with updated Max Secure Anti Virus with Rootkit and Deep scan option.
%20Facebook_2022102885845.png)