Nemucod Ransomware Removal Guide (Uninstall Nemucod Ransomware)

Nemucod Ransomware is a malicious threat that comes from the Nemucod family. The infection spreads on the Web through the Nemucod Trojan.Downloader sent to you via a spam email with an encoded JavaScript attachment. When you open the attachment, the Javascript executes and adds the harmful program onto your PC. The Trojan has been known to install .CRYPTED ransomware, TeslaCrypt variants, and others.

All programs of this type work in a similar manner, so it does not matter which parasite is dropped on your computer, it will still encrypt your files and present you with a ransom note. The note will claim that you should make a payment, if you wish to get your files back. We urge you not to do that and, instead, terminate Nemucod Ransomware right away.

Nemucod-ransomwareHow does Nemucod Ransomware work?

Once the ransomware gets installed, it scans your computer for data files. It encrypts all files detected on your drives including your documents, photos, music, videos, and so on. All affected files have an extension added to them. Depending on the type of the malign program, it could be .CRYPTED, .ecc, .ezz, .exx, or other. The encoded data cannot be accessed by anyone without a decryption key.

After corrupting your files, the parasite creates a text file containing instructions on how to decrypt your data. This file usually appears in all folders that have encrypted data. The ransom note claims that you can purchase the decryption key, which will help you to restore your files. The price of the key may vary, but you will be asked to pay in Bitcoins. At the moment, 1 Bitcoin equals about $450. There is no need for you to make the payment, because you can recover your files for free. An Emsisoft employee has developed a decrypter for the Nemucod Ransomware. You can download Decrypt Nemucod online and use it to decrypt your data. After you restore your files, you need to make sure that you delete Nemucod Ransomware from your computer for good.

How to remove Nemucod Ransomware?

It is extremely important that you clean your system with a powerful malware remover, because the ransomware usually does not slither into your system alone. You have to delete Nemucod Ransomware along with other threats present on your PC. You can do that by acquiring a security tool from our page. It will perform a full system scan and detect all malign files and programs that it contains. It will remove Nemucod Ransomware and other parasites without any difficulty. In addition to Nemucod Ransomware removal, the anti-malware will also ensure your system’s safety in the future by providing it with online protection in real time.


More information about WiperSoft and Uninstall Instructions. Please review WiperSoft EULA and Privacy Policy. WiperSoft scanner is free. If it detects a malware, purchase its full version to remove it.

  • wipersoft

    WiperSoft Review Details WiperSoft ( is a security tool that provides real-time security from potential threats. Nowadays, many users tend to download free software from the Intern ...

  • mackeeper

    Is MacKeeper a virus? MacKeeper is not a virus, nor is it a scam. While there are various opinions about the program on the Internet, a lot of the people who so notoriously hate the program have neve ...

  • malwarebytes-logo2

    While the creators of MalwareBytes anti-malware have not been in this business for long time, they make up for it with their enthusiastic approach. Statistic from such websites like CNET shows that th ...


Quick Menu

Step 1. Uninstall Nemucod Ransomware and related programs.

Remove Nemucod Ransomware from Windows 8

Right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel choose Programs and Features and select to Uninstall a software.

Delete Nemucod Ransomware from Windows 8

Uninstall Nemucod Ransomware from Windows 7

Click Start → Control Panel → Programs and Features → Uninstall a program.

Uninstall Nemucod Ransomware from Windows 7

Delete Nemucod Ransomware from Windows XP

Click Start → Settings → Control Panel. Locate and click → Add or Remove Programs.

Remove Nemucod Ransomware from Windows XP

Remove Nemucod Ransomware from Mac OS X

Click Go button at the top left of the screen and select Applications. Select applications folder and look for Nemucod Ransomware or any other suspicious software. Now right click on every of such entries and select Move to Trash, then right click the Trash icon and select Empty Trash.

Nemucod Ransomware removal from MAC OS X

Step 2. Delete Nemucod Ransomware from your browsers

Terminate the unwanted extensions from Internet Explorer
  1. Tap the Gear icon and go to Manage Add-ons. Nemucod Ransomware IE gear
  2. Pick Toolbars and Extensions and eliminate all suspicious entries (other than Microsoft, Yahoo, Google, Oracle or Adobe) Nemucod Ransomware IE toolbars and extensions
  3. Leave the window.
Change Internet Explorer homepage if it was changed by virus:
  1. Tap the gear icon (menu) on the top right corner of your browser and click Internet Options. Nemucod Ransomware IE gear
  2. In General Tab remove malicious URL and enter preferable domain name. Press Apply to save changes. Nemucod Ransomware IE toolbars and extensions
Reset your browser
  1. Click the Gear icon and move to Internet Options. Nemucod Ransomware IE options
  2. Open the Advanced tab and press Reset. Nemucod Ransomware IE reset browser
  3. Choose Delete personal settings and pick Reset one more time. Nemucod Ransomware IE reset
  4. Tap Close and leave your browser. Nemucod Ransomware IE close
  5. If you were unable to reset your browsers, employ a reputable anti-malware and scan your entire computer with it.
Erase Nemucod Ransomware from Google Chrome
  1. Access menu (top right corner of the window) and pick Settings. Nemucod Ransomware Chrome menu
  2. Choose Extensions. Nemucod Ransomware Chrome settings
  3. Eliminate the suspicious extensions from the list by clicking the Trash bin next to them. Nemucod Ransomware Chrome extensions remove
  4. If you are unsure which extensions to remove, you can disable them temporarily. Nemucod Ransomware Chrome extensions disable
Reset Google Chrome homepage and default search engine if it was hijacker by virus
  1. Press on menu icon and click Settings. Nemucod Ransomware Chrome menu
  2. Look for the “Open a specific page” or “Set Pages” under “On start up” option and click on Set pages. Nemucod Ransomware Chrome settings
  3. In another window remove malicious search sites and enter the one that you want to use as your homepage. Nemucod Ransomware Chrome extensions remove
  4. Under the Search section choose Manage Search engines. When in Search Engines..., remove malicious search websites. You should leave only Google or your preferred search name. Nemucod Ransomware Chrome extensions disable
    Nemucod Ransomware Chrome extensions disable
Reset your browser
  1. If the browser still does not work the way you prefer, you can reset its settings.
  2. Open menu and navigate to Settings. Nemucod Ransomware Chrome settings more
  3. Press Reset button at the end of the page. Nemucod Ransomware Chrome advanced menu
  4. Tap Reset button one more time in the confirmation box. Nemucod Ransomware Chrome reset
  5. If you cannot reset the settings, purchase a legitimate anti-malware and scan your PC.
Remove Nemucod Ransomware from Mozilla Firefox
  1. In the top right corner of the screen, press menu and choose Add-ons (or tap Ctrl+Shift+A simultaneously). Nemucod Ransomware Firefox add ons
  2. Move to Extensions and Add-ons list and uninstall all suspicious and unknown entries. Nemucod Ransomware Firefox extensions
Change Mozilla Firefox homepage if it was changed by virus:
  1. Tap on the menu (top right corner), choose Options. Nemucod Ransomware Firefox reset confirm
  2. On General tab delete malicious URL and enter preferable website or click Restore to default. Nemucod Ransomware Firefox reset confirm
  3. Press OK to save these changes.
Reset your browser
  1. Open the menu and tap Help button. Nemucod Ransomware Firefox help
  2. Select Troubleshooting Information. Nemucod Ransomware Firefox troubleshooting
  3. Press Refresh Firefox. Nemucod Ransomware Firefox reset
  4. In the confirmation box, click Refresh Firefox once more. Nemucod Ransomware Firefox reset confirm
  5. If you are unable to reset Mozilla Firefox, scan your entire computer with a trustworthy anti-malware.
Uninstall Nemucod Ransomware from Safari (Mac OS X)
  1. Access the menu.
  2. Pick Preferences. Nemucod Ransomware Safari menu
  3. Go to the Extensions Tab. Nemucod Ransomware Safari extensions
  4. Tap the Uninstall button next to the undesirable Nemucod Ransomware and get rid of all the other unknown entries as well. If you are unsure whether the extension is reliable or not, simply uncheck the Enable box in order to disable it temporarily.
  5. Restart Safari.
Reset your browser
  1. Tap the menu icon and choose Reset Safari. Nemucod Ransomware Safari reset menu
  2. Pick the options which you want to reset (often all of them are preselected) and press Reset. Nemucod Ransomware Safari reset
  3. If you cannot reset the browser, scan your whole PC with an authentic malware removal software.

Site Disclaimer is not sponsored, owned, affiliated, or linked to malware developers or distributors that are referenced in this article. The article does not promote or endorse any type of malware. We aim at providing useful information that will help computer users to detect and eliminate the unwanted malicious programs from their computers. This can be done manually by following the instructions presented in the article or automatically by implementing the suggested anti-malware tools.

The article is only meant to be used for educational purposes. If you follow the instructions given in the article, you agree to be contracted by the disclaimer. We do not guarantee that the artcile will present you with a solution that removes the malign threats completely. Malware changes constantly, which is why, in some cases, it may be difficult to clean the computer fully by using only the manual removal instructions.

Leave a Reply