Trojan:Win32/Ninunarch.N removal guide

Malware Removal

The Trojan:Win32/Ninunarch.N is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Trojan:Win32/Ninunarch.N virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan:Win32/Ninunarch.N?


File Info:

crc32: 718976A0
md5: 06c650c0cbb5fd2f825a3d6574c553fd
name: 06C650C0CBB5FD2F825A3D6574C553FD.mlw
sha1: 8ddfc57b88b71ea84458aa41b062ff67a7d7b187
sha256: 30ebb0acd28611a8c6d0aae2492f32da5a1a8779539f4f2f06b0b26779ae19b8
sha512: 445afada313dda1236ad5673025516d632a420e11818d1a550d8292527574386765a9c70d2e4472e630dc40423be805cee5d2bfad75f58d735f2c0afb4612f1e
ssdeep: 24576:qAMPv/pSLE2jqxW7T/qeQX+XffQDLjSuU7jK/cRgOnmq9g6zCU:DHE+q8Pib8kDUUcOU7m6zH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: WinZip+
InternalName:
FileVersion: 1.8.5.662
CompanyName: WinZip+
LegalTrademarks: WinZip+
Comments:
ProductName:
ProductVersion: 1.8.5
FileDescription: WinZip+ Self-Extractor
OriginalFilename:
Translation: 0x0419 0x04e3

Trojan:Win32/Ninunarch.N also known as:

Elasticmalicious (high confidence)
DrWebTrojan.SMSSend.455
MicroWorld-eScanGen:Heur.Zilix.5
FireEyeGeneric.mg.06c650c0cbb5fd2f
McAfeeSMSFraud.s
CylanceUnsafe
VIPRETrojan.Win32.FakeInst.a (v)
AegisLabTrojan.Win32.FakeInstaller.mvXN
SangforVirus_Suspicious.Win32.Sality.ae
K7AntiVirusTrojan ( 7000000f1 )
BitDefenderGen:Heur.Zilix.5
K7GWTrojan ( 7000000f1 )
Cybereasonmalicious.0cbb5f
BitDefenderThetaGen:NN.ZelphiF.34590.dX2aaydbPcbo
CyrenW32/FakeInstall.B.gen!Eldorado
SymantecPUA.SMSFastLoads
TotalDefenseWin32/Fraudinstaller.A
APEXMalicious
AvastWin32:FakeInst-AE [Trj]
ClamAVWin.Trojan.Agent-276131
KasperskyTrojan-Ransom.Win32.FakeInstaller.alva
AlibabaRansom:Win32/FakeInstaller.5e9568c7
NANO-AntivirusTrojan.Win32.FakeInstaller.cfjrl
RisingRansom.FakeInstaller!8.1D69 (CLOUD)
Ad-AwareGen:Heur.Zilix.5
SophosML/PE-A + Mal/FakeInst-B
ComodoApplication.Win32.SMSsend.A@2nalbs
F-SecureTrojan:W32/Fakeinstaller.B
ZillyaTrojan.FakeInstaller.Win32.1167
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
EmsisoftGen:Heur.Zilix.5 (B)
IkarusTrojan-Ransom.FakeInstaller
JiangminTrojan/FakeInstaller.apq
MaxSecureTrojan.Ransom.FakeInstaller.alva
AviraTR/Crypt.XPACK.Gen3
Antiy-AVLTrojan[Ransom]/Win32.FakeInstaller
KingsoftWin32.Heur.KVM011.a.(kcloud)
MicrosoftTrojan:Win32/Ninunarch.N
ArcabitTrojan.Zilix.5
SUPERAntiSpywareTrojan.Agent/Gen-FakeInst
ZoneAlarmTrojan-Ransom.Win32.FakeInstaller.alva
GDataGen:Heur.Zilix.5
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Fakeinst.Gen
VBA32TScope.Trojan.Delf
ALYacGen:Heur.Zilix.5
MAXmalware (ai score=100)
MalwarebytesMalware.AI.1498920361
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Hoax.ArchSMS.AS
TencentWin32.Trojan.Fakeinstaller.cos
YandexTrojan.GenAsa!vKOZfIKLW+o
FortinetW32/FakeInstaller.ALVA!tr
WebrootW32.FakeAlert.Gen
AVGWin32:FakeInst-AE [Trj]
Qihoo-360HEUR/Malware.QVM19.Gen

How to remove Trojan:Win32/Ninunarch.N?

Trojan:Win32/Ninunarch.N removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment