Solved! Use NNIB.EXE (KeyLogger Ardamax) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NNIB.EXE – KeyLogger Ardamax removal

File MD5 Virus Alias
NNIB.EXE 17535dddecf8cb1efdba1f1952126547 KeyLogger Ardamax
NNIB.EXE 17535dddecf8cb1efdba1f1952126547 Trojan UnwantedProgram
NNIB.EXE 17535dddecf8cb1efdba1f1952126547 Trojan Generic
NNIB.EXE 17535dddecf8cb1efdba1f1952126547 Trojan Agent

NNIB.EXE size: 484864 bytes
NNIB.EXE hash: 17535DDDECF8CB1EFDBA1F1952126547

Created files:

%SysDir%\28463\AKV.exe
%SysDir%\28463\NNIB.001
%SysDir%\28463\NNIB.002
%SysDir%\28463\NNIB.006
%SysDir%\28463\NNIB.007
%SysDir%\28463\NNIB.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\NNIB Agent: %WinDir%\System32\28463\NNIB.exe

Detected by UnHackMe:

NNIB.EXE
Default location: %SYSDIR%\28463\NNIB.EXE

Dropper information:
MD5: 7bba5667d3a936549752fd7483b8c559
File size: 514824 bytes

Leave a Reply