Categories: Virus

Virus.Nimnul.19209 removal guide

The Virus.Nimnul.19209 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus.Nimnul.19209 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Likely virus infection of existing system binary
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

ddos.dnsnb8.net

How to determine Virus.Nimnul.19209?


File Info:
crc32: 4D3CEFB9md5: 14f6b75515df5eee396d961e161148c5name: yk.exesha1: b9921cc2bfe3b43e457cdbc7d82b849c66f119cbsha256: 56133c0d017af35f49253926e3583cf72c36146ab7faa65b6058971685166652sha512: 7b64a6ea6a26dd8acf70c9fb041b41152c3ff1974f6438b1b8fdf599cd71249638bb14e87c57d727aa8b8f2b56bd4dcc058c6a658a286849e74f95994c540682ssdeep: 24576:xc0jOBWAaFSSAx33ww0PEh81i8VAq04mBM9bG7:xGxVmEhid9ytype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Virus.Nimnul.19209 also known as:

Bkav	W32.FamVT.DumpModuleInfectiousNME.PE
DrWeb	Trojan.Siggen8.64210
MicroWorld-eScan	Win32.VJadtre.3
McAfee	W32/Kudj
Cylance	Unsafe
VIPRE	Virus.Win32.Small.acea (v)
AegisLab	Virus.Win32.Nimnul.m1R5
Sangfor	Malware
K7AntiVirus	Virus ( 0040f7441 )
BitDefender	Win32.VJadtre.3
K7GW	Virus ( 0040f7441 )
Cybereason	malicious.515df5
TrendMicro	PE_WAPOMI.BM
BitDefenderTheta	AI:FileInfector.991137D00F
F-Prot	W32/PatchLoad.E
Symantec	W32.Wapomi.C!inf
TotalDefense	Win32/Nimnul.A
APEX	Malicious
Avast	Win32:Rootkit-gen [Rtk]
ClamAV	Win.Malware.Zusy-6840460-0
GData	Win32.Virus.Wapomi.A
Kaspersky	Virus.Win32.Nimnul.f
Alibaba	virus:Win32/InfectPE.ali2000007
NANO-Antivirus	Trojan.Win32.Banload.cstqaj
ViRobot	Win32.Ramnit.F
Rising	Virus.Roue!1.9E10 (CLOUD)
Ad-Aware	Win32.VJadtre.3
Emsisoft	Win32.VJadtre.3 (B)
Comodo	Virus.Win32.Wali.KA@558nxg
F-Secure	Malware.W32/Jadtre.B
Baidu	Win32.Virus.Otwycal.d
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Ramnit.dh
FireEye	Generic.mg.14f6b75515df5eee
Sophos	W32/Nimnul-A
Ikarus	Trojan-Downloader.Win32.Small
Cyren	W32/PatchLoad.E
Jiangmin	Win32/Nimnul.f
Webroot	W32.Small.acea
Avira	W32/Jadtre.B
MAX	malware (ai score=82)
Antiy-AVL	Virus/Win32.Nimnul.f
Endgame	malicious (high confidence)
Arcabit	Win32.VJadtre.3
ZoneAlarm	Virus.Win32.Nimnul.f
Microsoft	Virus:Win32/Mikcer.B
AhnLab-V3	Win32/VJadtre.Gen
Acronis	suspicious
VBA32	Virus.Nimnul.19209
ALYac	Win32.VJadtre.3
TACHYON	Virus/W32.Ramnit.C
Panda	W32/Pcarrier.A
Zoner	Virus.Win32.23755
ESET-NOD32	Win32/Wapomi.BA
TrendMicro-HouseCall	PE_WAPOMI.BM
Tencent	Virus.Win32.Loader.aab
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Nimnul.F
AVG	Win32:Rootkit-gen [Rtk]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Virus.Win32.Agent.P