Remove Nunci. Description and removal instructions

Title: Nunci
Type: Dialers	Severity scale: (45 / 100)

Nunci is a dialer that connects your computer to the Internet via high-cost phone number using a modem. It also changes the web browser's default start and search pages. Nunci can be installed to the system while visiting some web sites. Once executed, it creates Winx folder in the default system directory (C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32), drops its files and modifies the registry, so the threat could run on every system startup. Nunci adds several desktop shortcuts and contacts a predefined web server.

FORUM:
Discuss Nunci in
spyware removal forum

Nunci properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Nunci removal:

remover for Nunci

Nunci manual removal:

Kill processes:
sys.exe, snss.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\connector=%System%\Winx\sys.exe -n
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\snss.exe=%System%\snss.exe
HKEY_CURRENT_USER\Software\Freeware\{AC5ACED1-97DB-4A2A-81A9-ACFC8ECA1085}
HKEY_CURRENT_USER\Software\Freeware\{FFB51760-344E-4FFB-BFFF-4B18C7AC1D63}
HKEY_LOCAL_MACHINE\SOFTWARE\CLSID\{AE71A324-1EF2-40BC-ADDC-30FD9CF95F87}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{54F7FD6E-E782-4F9F-8FF0-677090048729}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FFB51760-344E-4FFB-BFFF-4B18C7AC1D63}

HELP:
how to remove registry entries

Delete files:
sys.exe, snss.exe

HELP:
how to remove harmful files

Delete directories:
[System]\Winx

Other programs to remove Nunci:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/07/05
Information updated: 19/07/05

Additional resources related to Nunci:

Attention: If you know or you have a website or page about Nunci removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Nunci parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.