Remove Niumu. Description and removal instructions

 
Title: Niumu

Type: Worms
Severity scale:Niumu severity is 54  (54 / 100)
 
Niumu is a worm that spreads through unprotected network shares by infecting any executables and screen saver files found. It also infects local files of these types. Niumu creates copies of itself on all local fixed drives. It downloads from the Internet and executes malicious files that allow it to monitor Internet Explorer windows in attempt to steal passwords. The worm runs as a service on every Windows startup. It is able to run in Windows Safe Mode.


Related files: muniu.exe, rundll32.exe, temp.exe, muniu.dll

Niumu properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Niumu removal:

remover for Niumu

Niumu manual removal:

Kill processes:
muniu.exe, rundll32.exe, temp.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\RemoteAccess
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\W32Time
Unregister DLLs:
muniu.dll

Delete files:
muniu.exe, rundll32.exe, temp.exe, muniu.dll
Misc:
Exact file location:
rundll32.exe - C:\WINDOWS or C:\WINNT
muniu.dll - C:\WINDOWS\Downloaded Program Files or C:\WINNT\Downloaded Program Files
muniu.exe - C:\WINDOWS\Downloaded Program Files or C:\WINNT\Downloaded Program Files; C:

Other programs to remove Niumu:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 02/05/07
Information updated: 02/05/07

Additional resources related to Niumu:

Attention: If you know or you have a website or page about Niumu removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Niumu parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: