Threat Database Trojans TrojanDownloader:Win32/Navattle.A


By Domesticus in Trojans

TrojanDownloader:Win32/Navattle.A is a Trojan that drops and executes other files from a distant server on the compromised PC. TrojanDownloader:Win32/Navattle.A deletes a registry entry associated with the gaming service ''. TrojanDownloader:Win32/Navattle.A stops accounts of from functioning normally. While being run, TrojanDownloader:Win32/Navattle.A also makes modifications to the Windows Registry so that it can start automatically whenever you boot up Windows. TrojanDownloader:Win32/Navattle.A also deletes the registry key pertaining to ''.

File System Details

TrojanDownloader:Win32/Navattle.A may create the following file(s):
# File Name Detections
1. %Systemroot%\system32\nusb3mon.exe

Registry Details

TrojanDownloader:Win32/Navattle.A may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AhnLab V3Lite Update Process" = "%Systemroot%\system32\nusb3mon.exe"
HKEY_CURRENT_USER\Software\Blizzard Entertainment\\Identity


Most Viewed