Completely Remove Nuvens Spyware From Your Computer

Published on 08-10-2008  | 

Nuvens is one of the latest spyware infections plaguing users on the Internet. It is a particularly difficult piece of spyware to remove from your computer. This tutorial will show you how to remove the Nuvens spyware infection from your system.

NOTE: - It is important that you follow the directions on the following pages EXACTLY to ensure proper removal of the Nuvens spyware infection. Skipping steps, or performing actions out of sequence will result in an incomplete Nuvens removal and probable spyware reinfection. Please press (Ctrl+D) to bookmark this page so you can return here later. This Nuvens removal process will require you to restart your PC.

Nuvens infects your computer by masquerading as any number of legitimate programs. Once installed on your computer, it constantly runs in the background, making it very difficult to remove. It's main purpose is to serve as a doorway to other malware, which it downloads to, and installs on your computer. Some versions of Nuvens also hijack your searches, redirecting them to a new search page with adds based on that search.

The typical AntiSpyware utilities (Adaware, Spybot Search and Destroy, Microsoft AntiSpyware, and Windows Defender) can not remove it because nuvens is constantly running - even in Safe Mode.

With the introductions out of the way, you will now need to download the repair tool required to remove the Nuvens spyware infection. There is one tool needed that will repair the infection in your registry. Use the links below to download the tool and save it to your Windows Desktop. Right click on each link and select "Save As" and save them to your desktop.


Once you have this tool downloaded, you should also install a secure a secure browser, like Mozilla Firefox. While IE was not directly responsible for your computer being infected by Nuvens, there are many sites out there that will infect your computer directly through IE, some of which will also be uninstalled by the process we are about to take you through. Some of our tutorials are designed to remove threats that IE is responsible for letting onto your computer.
smitRem window

Once you have installed and opened Firefox, you need to prepare the smitRem tool for use. To do this, first locate the smitrem.exe file on your desktop. Double click on the file and you will see an extraction window similar to the one on the right. Click on Start and the extractor will create a folder on your desktop called smitrem.

Now you will use the tool you downloaded to your desktop. Locate the smitrem folder on your desktop and double click on it to open it. Locate a file in the folder named "runthis.bat" and double click on it to launch it. Click "Yes" on any security warnings that pop up. Follow the on-screen directions to move through the smitrem tool.

Once it has completed, the tool will exit and an automatic disk cleanup will be launched. This cleanup can take anywhere from minutes to hours to run, so be patient and do not interrupt it.

Once the disk cleanup is finished, the Nuvens spyware infection should be removed from your system. However, there are a few steps to make sure that there is nothing left over, and to prevent you from future infections. If you don't follow the remaining steps, Nuvens may still be infecting your computer.

Now that you have the smitRem tool prepared, you will need to reboot your computer into Safe Mode. You will need to restart your PC to do this, so be sure to press (Ctrl+D) to bookmark this page.

Once your computer has been restarted in Safe Mode, you need to make sure that all traces of Nuvens have been removed. The following instructions assume that for some reason sitRem was not able to remove the infection from your computer. If they instruct you to terminate a process or delete a registry key that does not exist, do not worry. This is a good thing. If you don't need to edit the registry, that means that Nuvens has been removed. Do not make any alterations to the registry other than the ones you are instructed to make here.

To do this you must end the nuvens tasks. By design, the tasks are difficult to identify. First, press the "ctrl" + "alt" + "del" keys at the same time. The Task Manager window should now appear. Click on the "Processes" tab. Under Process Name, look for any of the tasks listed below in the list in your computer.

  • pornmagpass.exe

If you find any matches, highlight the task by left clicking on it, and then click on the "End Process" button. End any and all matches you find, because there could be more than one. As you end the processes, be sure to click "Yes" to any warning boxes that pop up.

The next step involves editing the registry. The registry is very important to your computer, and if a mistake is made in this step, it can cause serious problems. For this reason we recommend that before you complete it, you back up your registry, and be very careful with the changes.

Next, click Start -> Run. Then type REGEDIT, and click OK. Navigate to and delete the following subkeys:

  • HKEY_CURRENT_USER\software\pornmag pass
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run pmsngr.exe
  • HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pornmag pass

Finally, delete the following directories and their containing files in Explorer:

  • %Program Files%\intcodec
  • %Program Files%\pornmag pass

Next, reboot your computer to exit Safe Mode, and be sure to run a full virus scan with your Antivirus software and use a reputable spyware removal program like The Maintenance Checkup Home Edition to ensure all additional threats have been removed.

Spyware removal is just one component of a free software suite called the Google Pack.

Downloading and installing the Google Pack over a high speed connection will take about 3 minutes, but it is well worth the wait. There are thousands of infections just like Nuvens out there that can cost you, your family, or your business big money if your computer is left unprotected. Protect your computer, your family and your business with the Google Pack.

Lincoln Service Center
Address :
7501 S 15th Street,
Suite G
Lincoln, NE - 68512

Monday-Saturday 10am-8pm
Sunday Noon-5pm

Tel : (402) 423-9595
Omaha Service Center
Address :
16909 Burke St,
Suite 129
Omaha, NE - 68118

Monday-Saturday 10am-8pm
Sunday Noon-5pm

Tel : (402) 934-9423
Papillion Service Center
Address :
249 Olson Drive,
Suite 101
Papillion, NE - 68046

Monday-Saturday 10am-8pm
Sunday Noon-5pm

Tel : (402) 884-0880
Des Moines Service Center
Address :
9500 University Ave.
Suite 2104
West Des Moines, IA - 50266

Monday-Saturday 10am-6pm
Sunday Closed

Tel : (515) 695-0244

@2024 All Rights Reserved