TrojanSpy:Win32/Nivdort

The Nivdort family of threats is comprised of Trojans that are designed to gather and send the information stored on the infected computer. Representatives of the Nivdort family are known for their cross-platform support and modular structure, which allows them to run on the latest versions of Windows. The Nivdort Trojan is favored by many hackers that seek to obtain control of social media accounts, online banking accounts, email passwords, social security numbers and licenses for paid applications. Malware researchers reveal that threats from the Nivdort family are deployed by Trojan-Droppers like Koobface and Sventore actively. Most campaigns that involve the Nivdort Trojan may be executed via spam emails and target credentials for the banking portals of Industrial & Commercial Bank of China, BNP Paribas SA and JPMorgan Chase & Co. Computer users are not advised to open and download files attached to spam emails that may mention updates on the policy of banks and social media like Facebook and Twitter.

The variants of TrojanSpy:Win32/Nivdort may travel enclosed in PDF and DOCX files that have a double file extension, and users may experience program crashes upon an infection. The Nivdort malware may connect to remote servers to download updates, and plug-ins to record your keyboard input and make screenshots. Network administrators may need to monitor port 80 for suspicious data transfers that may be initiated by the Nivdort malware. Computers that are infected with the Nivdort malware may have modified Windows Registries and boot.ini files. The Nivdort Trojan may be listed as a startup service and have a name that appears as gibberish compiled of random letters and numbers. Needless to say, no legitimate program would hide its name in such a manner. Researchers suggest that the Nivdort malware may change your DNS configuration, and you may not render Web pages correctly, as well as experience slow Internet connection. You can address problems with the Nivdort malware by installing a trusted anti-malware shield that has run-time scanners built-in and can detect the signature of TrojanSpy:Win32/Nivdort.