I need help to remove TrojanDownloader:JS/Nemucod.H virus from my new laptop. I got this virus two days ago and the antivirus program cannot get rid of it. Also I have tried to install other two, but they either cannot help me out. I also tried to enter registry editor to look for suspicious files, but I cannot tell it from many files, exe. I am afraid I will do something wrong to make computer mess up. So I think your experts should help me take this virus out.

TrojanDownloader:JS/Nemucod.H Virus Description:

TrojanDownloader:JS/Nemucod.H virus is a stubborn and dangerous Trojan horse to corrupt windows computer. It enters system and changes the settings of system to disorder system function. It has a strong ability to corrupt system files and disorder windows registry. Many crucial system files can be damaged or re-edited or deleted by this Trojan horse, which will severely cause the system to run improperly. It even can invade and destroy antivirus programs’ firewall and remove files related to security tool, which will make your security tool disable and becomes useless. That is why some victims even cannot get any security report from their antivirus and security tool cannot remove it at all. It is very tricky. In order to deeply root in your computer, it also can duplicate itself into computer security loopholes and hide in many places in the hard drive. TrojanDownloader:JS/Nemucod.H virus is good at changing your registry settings, and adding new codes on your computer system. Then you cannot surf online smoothly and you will be redirected to different kinds of malicious websites, receive numbers of ads, pop-ups, flash pictures or links, even your desktop will be full of strange shortcuts, some of which cannot be deleted. It even does not allow you to download any new programs or applications by displaying a message like “your current security settings do not allow this file to be downloaded” to block you. It aims at blocking you to access any tool to remove itself.  Gradually, your computer will be controlled completely by this Trojan horse and you cannot do anything to remove it.

TrojanDownloader:JS/Nemucod.H  infection comes from those infected websites where you may accidentally visit. Those infected websites are compromised with malware or virus. Once you visit them, this Trojan horse or other threats will come. And cyber criminals can insert extension of this redirect infection into those free downloading application. When PC users download and install the application they need, this Trojan infection will come. To prevent it, you had better choose customized installation not default one, so that you can get rid of those unwanted and suspicious additional apps. Sometimes, strangers may send you attractive files, and don’t open it, because it may also contain infections like Searchbetter.com hijacker. Besides, this Trojan virus can also be spread via many ways including spam email attachments, peer-to-peer files and so on. Be careful of your online activities will help you protect your computer. What’s worse, this virus is also a big threat to your personal information security. It can help remote hackers to remotely control your computer and steal your privacy data for illegal profits. In this case, your privacy will be let out in public. Therefore, once you find this virus on computer, please remove it as soon as possible.

Some Traits about TrojanDownloader:JS/Nemucod.H Virus

-Can slow down the performance of the computer, or even blue screen.

-Can create many junk files which occupy a lot of space in hard drive.

-Can download other malicious programs into computer, which make further damage.

-Can redirect you to pages you don’t want all the time no matter what you are doing.

-Take a long time to turn on or shut down your computer

-Your sensitive information can be stolen by hacker who can access to your computer with the help of this Trojan.

-May pretend as an anti-virus program and cheat you that computer is in dangerous, and ask you to pay to remove the threats.

Warm prompt: It’s complicated for people who are not computer savvy or not familiar with the virus to remove the Trojan TrojanDownloader:JS/Nemucod.H. You can contact YooCare/YooSecurity PC professional online service for help:

Removal Guide for PCs with Windows OS

There is a removal guide of Trojan provided here; however, expertise is required during the process of removal, please make sure you are capable to do it by yourself.

>>>>>> Press Ctrl+Shift+Esc keys simultaneously to get the Task Manager to stop the active processes of TrojanDownloader:JS/Nemucod.H virus. To do this, you will need to click the “Processes” tag at the top then find out suspicious processes and right click on them and select “End Process”.



>>>>>> Click “Start” menu at the lower left corner and type “regedit” in the search programs and files box and press Enter key. Then you will open the “Registry Editor”.



>>>>>> You will need to find out the suspicious registry files in the Registry Editor, They are usually located in: HKEY_LOCAL_MACHINE > SOFTWARE. You need to distinguish them from their “Name” and “Data” at the right column. All of them will be randomly distributed. If you are not good at this, ask for an expert for help.

registry editor

>>>>>> After you find out the suspicious registry files, you need to find out where the .exe files of the virus locate. Usually, they will be in the operating system drive. To open it, you will need to click Start menu > Computer & My computer. Generally speaking, the Operating System drive is Local Disk (C:).


>>>>>> Basically speaking, all the related files of TrojanDownloader:JS/Nemucod.H virus will be located in Windows > System32. Find out all the files of the Trojan virus and delete them. Make sure that all the files you deleted are viruses, but not the files of the operating system. Any mistakes will cause data loss even system crash.


Video of Key Steps on How to Modify or Change Windows Registry:


TrojanDownloader:JS/Nemucod.H virus can severely attack your computer once it gets on your PC. It corrupts your system files, weakens the security level of the infected computer and modifies all your key registry settings as well as disables your firewall because of its root-kit. The CPU usage percentage will become higher than before, which will cause constant blue or black screen death and system freeze. this Trojan virus helps cyber criminals remotely control the infected PC. So hackers can do anything on your PC and get any information from your computer or by tracking your online history. And users’ personal information like credit card, bank account details, log-in passwords or other financial information could be leaked out. Victims of virus will suffer from financial loss. This Trojan must be removed as fast as possible to avoid further damages if you detect this nasty thing on your computer.

Warm prompt: If you are not computer savvy or not familiar with the virus to remove TrojanDownloader:JS/Nemucod.H virus. You can contact YooCare/YooSecurity PC professional online service for help:

Published by Tony Shepherd & last updated on May 27, 2015 4:52 am

Leave a Reply