Remove %WINDIR%\NNMAFBFBOKXX.EXE malware
%WINDIR%\NNMAFBFBOKXX.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of %WINDIR%\NNMAFBFBOKXX.EXE:
%windir%\nnmafbfbokxx.exe
Full path on a computer: %WINDIR%\NNMAFBFBOKXX.EXE
Autostart registry keys:
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\GIQKXQR: "%SYSDIR%\CMD.EXE /C START %WINDIR%\NNMAFBFBOKXX.EXE"
Related Files:
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.HTML
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.PNG
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.TXT
%WINDIR%\NNMAFBFBOKXX.EXE
%SYSTEMDRIVE%\BOOTSECT.BAK.MP3
The file NNMAFBFBOKXX.EXE is malware related.
You must delete the file NNMAFBFBOKXX.EXE immediately!
Delete the file NNMAFBFBOKXX.EXE without delay!
Kill the process NNMAFBFBOKXX.EXE and remove NNMAFBFBOKXX.EXE from the Windows startup.
NNMAFBFBOKXX.EXE is related to: Ransom:Win32/Tescrypt!rfn, NNMAFBFBOKXX.EXE.
Virustotal = 46/57
MD5 = DC13E7D8C12A96C44D138BC2E3B08CC5
File Size: 332800
| %WINDIR%\NNMAFBFBOKXX.EXE | Malware |
| %WINDIR%\NNMAFBFBOKXX.EXE | Dangerous |
| %WINDIR%\NNMAFBFBOKXX.EXE | High Risk |
Autostart registry keys:
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\GIQKXQR: "%SYSDIR%\CMD.EXE /C START %WINDIR%\NNMAFBFBOKXX.EXE"
Related Files:
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.HTML
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.PNG
%SYSTEMDRIVE%\USERS\_RECOVERY_+MWBAP.TXT
%WINDIR%\NNMAFBFBOKXX.EXE
%SYSTEMDRIVE%\BOOTSECT.BAK.MP3
The file NNMAFBFBOKXX.EXE is malware related.
You must delete the file NNMAFBFBOKXX.EXE immediately!
Delete the file NNMAFBFBOKXX.EXE without delay!
Kill the process NNMAFBFBOKXX.EXE and remove NNMAFBFBOKXX.EXE from the Windows startup.
NNMAFBFBOKXX.EXE is related to: Ransom:Win32/Tescrypt!rfn, NNMAFBFBOKXX.EXE.
Virustotal = 46/57
MD5 = DC13E7D8C12A96C44D138BC2E3B08CC5
File Size: 332800
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.