Solved! Use NNIB.007 (KeyLogger Ardamax) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

NNIB.007 – KeyLogger Ardamax removal

File MD5 Virus Alias
NNIB.007 b5a87d630436f958c6e1d82d15f98f96 KeyLogger Ardamax
NNIB.007 b5a87d630436f958c6e1d82d15f98f96 Trojan UnwantedProgram
NNIB.007 b5a87d630436f958c6e1d82d15f98f96 Trojan Genome
NNIB.007 b5a87d630436f958c6e1d82d15f98f96 Trojan Eldorado
NNIB.007 b5a87d630436f958c6e1d82d15f98f96 Trojan Agent

NNIB.007 size: 5632 bytes
NNIB.007 hash: B5A87D630436F958C6E1D82D15F98F96

Created files:

%SysDir%\28463\AKV.exe
%SysDir%\28463\NNIB.001
%SysDir%\28463\NNIB.002
%SysDir%\28463\NNIB.006
%SysDir%\28463\NNIB.007
%SysDir%\28463\NNIB.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\NNIB Agent: %WinDir%\System32\28463\NNIB.exe

Detected by UnHackMe:

NNIB.007
Default location: %SYSDIR%\28463\NNIB.007

Dropper information:
MD5: 7bba5667d3a936549752fd7483b8c559
File size: 514824 bytes