Nuvens

What is Nuvens?
Nuvens, also known as Boarim, Puper, Moiling, Poshmont, is one of the latest spyware infections plaguing users on the Internet. Nuvens usually appears on websites that promote them as applications such as video file-format decoders and applications for obtaining pornography. Once installed on your computer, Nuvens constantly runs in the background. Some versions of Nuvens also hijack your searches, redirect them to a new search page with add-on based on that search and display advertised results relating to the users search.

Do you have Nuvens?
If you have enough time and expertise, you can search your computer for Nuvens manually. However, it might take hours to find out all files of Nuvens, and it is possible that Nuvens will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Nuvens
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Nuvens removal instructions
WARNING: The manually removal method is for advanced users. Nuvens manually removal can be difficult and time-consuming. There is no guarantee that Nuvens can be completely removed, for there are hundreds of files generated when Nuvens installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Nuvens removal manually:

Navigate and stop Nuvens processes:
pornmagpass.exe

Navigate and Remove Nuvens registry values:
HKEY_CLASSES_ROOT\AVZipEnchancer.Chl
HKEY_CLASSES_ROOT\clsid\{fe8aca46-adf0-4785-b550-89762dc330e6}
HKEY_CLASSES_ROOT\codecssoftwarepackage.chl
HKEY_CLASSES_ROOT\emediacodek.chl
HKEY_CLASSES_ROOT\imageactivexobject.chl
HKEY_CLASSES_ROOT\interface\{e29be7f1-e2d8-4036-91ce-c3f8aac42495}
HKEY_CLASSES_ROOT\paintingroomclasses.animatedicon
HKEY_CLASSES_ROOT\paintingroomclasses.animatedicon.1
HKEY_CLASSES_ROOT\typelib\{979c2ead-48cb-454a-adfa-a123158dd508}
HKEY_CLASSES_ROOT\videoaxobject.chl
HKEY_CLASSES_ROOT\VSEnchancer.Chl
HKEY_CURRENT_USER\Software\Internet Security
HKEY_CURRENT_USER\Software\Online Add-on
HKEY_CURRENT_USER\software\paintingroom
HKEY_CURRENT_USER\Software\PornMag Pass
HKEY_LOCAL_MACHINE\software\paintingroom
HKEY_CLASSES_ROOT\avzipenchancer.chl
HKEY_CLASSES_ROOT\clsid\{f0c5ef8b-f4bb-4612-9ea8-361fff3da3d5}
HKEY_CLASSES_ROOT\imageactivexobject
HKEY_CLASSES_ROOT\videoaccessactivex.chl
HKEY_CLASSES_ROOT\vsenchancer.chl
HKEY_CURRENT_USER\software\online add-on
HKEY_CURRENT_USER\software\pornmag pass
HKEY_CURRENT_USER\software\\internet security
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\brain codec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\image activex solution
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ivideocodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mmediacodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\mpvideocodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pornmag pass
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pornpass manager
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\qualitycodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\softcodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\strcodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\video activex object
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\video add-on
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\video ax object
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\videocompressioncodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\videokeycodec
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\intcodec
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcodec

Navigate and Delete Nuvens files:
[%COMMON_DESKTOPDIRECTORY%]\Online Security Guide.url
[%COMMON_DESKTOPDIRECTORY%]\Security Troubleshooting.url
[%COMMON_STARTMENU%]\Online Security Guide.url
[%COMMON_STARTMENU%]\Security Troubleshooting.url
[%PROGRAM_FILES%]\AOL Toolbar\toolbar.dll
[%PROGRAM_FILES%]\PaintingRoom\paintingroomclasses.dll
[%PROGRAM_FILES%]\PCODEC\uninst.exe
[%PROGRAM_FILES%]\Video ActiveX Object\uninst.exe
[%SYSTEM%]\update26313404.exe
[%SYSTEM%]\vcodec.exe
[%DESKTOP%]\PornMag Pass.lnk
[%DESKTOP%]\PornPass Manager.lnk
[%SYSTEM%]\sttwrd.dll
[%COMMON_DESKTOPDIRECTORY%]\Online Security Guide.url
[%COMMON_DESKTOPDIRECTORY%]\Security Troubleshooting.url
[%COMMON_STARTMENU%]\Online Security Guide.url
[%COMMON_STARTMENU%]\Security Troubleshooting.url
[%PROGRAM_FILES%]\AOL Toolbar\toolbar.dll
[%PROGRAM_FILES%]\PaintingRoom\paintingroomclasses.dll
[%PROGRAM_FILES%]\PCODEC\uninst.exe
[%PROGRAM_FILES%]\Video ActiveX Object\uninst.exe
[%SYSTEM%]\update26313404.exe
[%SYSTEM%]\vcodec.exe
[%DESKTOP%]\PornMag Pass.lnk
[%DESKTOP%]\PornPass Manager.lnk
[%SYSTEM%]\sttwrd.dll
[%PROGRAM_FILES%]\Gold Codec
[%PROGRAM_FILES%]\Image ActiveX Access
[%PROGRAM_FILES%]\IntCodec
[%PROGRAM_FILES%]\iVideoCodec
[%PROGRAM_FILES%]\MMediaCodec
[%PROGRAM_FILES%]\MPVIDEOCODEC
[%PROGRAM_FILES%]\Online Image Add-on
[%PROGRAM_FILES%]\paintingroom
[%PROGRAM_FILES%]\PornMag Pass
[%PROGRAM_FILES%]\PornPass Manager
[%PROGRAM_FILES%]\QualityCodec
[%PROGRAM_FILES%]\SoftCodec
[%PROGRAM_FILES%]\StrCodec
[%PROGRAM_FILES%]\Video ActiveX Access
[%PROGRAM_FILES%]\Video ActiveX Object
[%PROGRAM_FILES%]\VideoCompressionCodec
[%PROGRAM_FILES%]\VideoKeyCodec
[%PROGRAM_FILES%]\VideosCodec
[%PROGRAMS%]\Gold Codec
[%PROGRAMS%]\IntCodec
[%PROGRAMS%]\PornMag Pass
[%PROGRAMS%]\PornPass Manager
[%PROGRAM_FILES%]\Brain Codec

What are the symptoms of Nuvens?

• Nuvens may hijack your searches on the Internet
• Nuvens may display advertisements
• Nuvens may run in the background
• Nuvens may masquerade as any number of legitimate programs
• Nuvens may slow down Internet surfing process

How do I keep away from Nuvens?
Once you have cleaned up Nuvens, the most important point to prevent Nuvens and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Nuvens and other malware:

• Use a computer firewall
• Confirm that you have downloaded all the latest critical security updates
• Adjust Internet Explorer web browser’s security settings
• Download and install anti-spyware protection, such as, Spyware Cease
• Surf sites and download programs from the web sites you trust

What is Adware?
Nuvens is a type of Adware.

Adware is any software that displays or downloads advertisements to a computer after the software is installed or while the software is in use. These advertisements can be banners or pop up windows. Some types of adware may even collect the user’s information and display advertisements in the web browser according to the information collected.

Adware can slow down your PC by consuming heavily Memory and CPU resources. Adware can also mess your Internet connection by using bandwidth to resume advertisements. Meanwhile, your system may be in risk of inefficiency because most adware applications are not properly programmed.