Trojan.NJRat

Trojan.NJRat Description

NJRat is a Trojan horse application that falls under the category of a Remote Access Trojan/Remote Administration Tool (RAT), which are threats known to load on a system without any indication to the computer user where it may allow remote attackers to gain access to the infected system.

The actions of NJRat are similar to that of popular Trojan horses where it could collect data from the infected computer, which may include usernames, passwords, system details, and other information that may be personal to the computer user. Such data that is collected by NJRat may be accessed by remote hackers, which could then lead to cases of identity theft.

One of the more discerning aspects of NJRat is that it could download other malicious programs on the infected computer, which include ransomware-type threats or other unknown malware that perform malevolent activates over the Internet.

Fundamentally, malicious actions of Trojan.NJRat vary and are all in an attempt to wreak havoc on a computer and potentially steal personal information.

How does NJRat end up on your computer?

The installation of NJRat may take place through spam campaigns that spread spam messages that contain malicious file attachments. Many of the file attachments may be in the form of MS office documents, PDF files, ZIP files, and even executables that appear to be harmless to most computer users. Avoiding the installation of NJRat may be as simple as paying special attention to attachment files or avoid potentially malicious sites that may offer downloaded third-party apps.

The removal of NJRat is a difficult task in most cases for even the savvy computer user. Due to NJRat having stealth-like advantages over other malware threats, it may not be easy to identify the threat and delete it from a Windows PC. Using an antimalware resource will suffice to safely detect and eliminate NJRat along with any of its associated malware files on an infected system.

Technical Information

File System Details

Trojan.NJRat creates the following file(s):
# File Name Size MD5 Detection Count
1 %SYSTEMDRIVE%\Users\cland\Desktop\Njrat\Plugin\pw.dll\pw.dll 39,936 db87daf76c15f3808cec149f639aa64f 472
2 %SYSTEMDRIVE%\Users\user\AppData\Local\Temp\Wind.exe\Wind.exe 168,448 53a9de48e432d5587bb93bc5a8c7bb8b 1
3 file.exe 160,256 a78b8d72a78767f92e9d93cdc995d9ae 0
4 AL-BASHA NJRAT CLEAN CRYPTER.EXE 690,688 98ff2a318c13d486f34f81459f9d5fc8 0
5 2a4b142a5249f32d552712bf01d18f23 53,248 2a4b142a5249f32d552712bf01d18f23 0
6 4bbc15dba26f9d7ae8c2e3ec8a63dd4d 50,688 4bbc15dba26f9d7ae8c2e3ec8a63dd4d 0
More files

Registry Details

Trojan.NJRat creates the following registry entry or registry entries:
File name without path
VIP Script.exe
Regexp file mask
%APPDATA%\server.exe
%appdata%\SyCom.exe
%TEMP%\Console Window Host.exe
%WINDIR%\System32\Tasks\NYAN

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.