Nymaim

Nymaim is a ransomware application that denies desktop access and hopes you will pay a ransom fee. The fee is said to be necessary in order to avoid criminal charges and to unlock your computer. As you can see, Nymaim is very similar to FBI MoneyPak virus and other ransomware applications. It has the same implications and you also use the same instructions to restore your desktop access (you can find them below this article). However, our security researchers warn that it is important to remove Nymaim all at once, because if any files are left behind, the infection might be restored automatically.

When you get infected with Nymaim, you are displayed a screen-sized notification which claims that you have violated national and international laws on cyber security. To avoid being charged you need to pay $300 via MoneyPak, Ukash or PaySafeCard alternative payment systems. Such alternative payment systems are not related to malware, but they can be used by cyber criminals to collect their payments. They also allow Nymaim to target a wide audience, because MoneyPak and similar alternative payment systems do not require credit cards. However, it goes without saying that you cannot send a single cent to the people behind Nymaim, because this way your problem will not be solved.

You most probably have been infected with Nymaim via Trojan infection. Trojan.Nymaim has been first detected last January and some security researchers say that it might be related to CryptoLocker malware as well. However, based on our research, according to the file size and file content Nymaim is no more different from other ransomware applications from Ukash group. However, this application may add RunOnce key into the registry which is not common among other Ukash infections. Not to mention that it can create a lot more files with different names and extensions. That is the main different between Nymaim and other ransomware applications, but other than the infection’s behavior is almost the same.

Due to the fact that Nymaim has a lot more files, it is necessary to remove them completely, because if there is at least one file remaining you may soon experience the infection symptoms again. To terminate Nymaim you need to unlock your computer and then delete all the malware files and registry entries. It is a rather difficult task, especially if you are not an experienced computer user, but you can achieve that by investing in a licensed computer security application.

Please refer to the instructions below in order to unlock your desktop. Should you have any further questions on Nymaim and its removal, do not hesitate to leave us a comment below.

How to unlock my computer

Windows 8

1. Press Windows key and wait for metro Start menu to show up.
2. Click the built-in Internet Explorer tile.
3. Enter http://www.pcthreat.com/download-sph into the address bar and press Enter.
4. Click Run on the download dialog box and install SpyHunter.
5. Scan your computer.

Windows Vista & Windows 7

1. Restart your PC and press F8 repeatedly once BIOS screen disappears.
2. If you see Windows logo show up, reboot the PC and try again.
3. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
4. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
5. Install the program and run a full system scan.

Windows XP

1. Follow the steps above from 1 to 3.
2. When Confirmation dialog box appears click Yes.
3. Download SpyHunter.
4. Open Start menu and launch Run.
5. Enter msconfig into Open box and click OK.
6. Select Startup tab on System Configuration Utilities.
7. Click Disable all option and press OK to save changes.
8. Restart the PC in Normal Mode.
9. Install SpyHunter and launch a full system scan.