Home Malware Programs Trojans Trojan Travnet

Trojan Travnet

Posted: March 18, 2013

Threat Metric

Threat Level: 8/10
Infected PCs: 5
First Seen: March 18, 2013
Last Seen: February 27, 2019
OS(es) Affected: Windows

Trojan Travnet steals information from any document-based file types on your computer, thereafter uploading them to a criminally-controlled server. Current estimates for Trojan Travnet's campaign place its age at a minimum of four years, making it a surprisingly old and regularly-developed spyware campaign. SpywareRemove.com malware experts can confirm that Trojan Travnet's primary distribution method is through malicious document files that install Trojan Travnet whenever a vulnerable PC opens them – all without any appearance of symptoms. Because Trojan Travnet avoids obvious details that would give its presence away, anti-malware applications should be favored for detecting Trojan Travnet or removing Trojan Travnet from your PC efficiently.

Trojan Travnet: Taking Everything that It Doesn't Have a Right to Snatch

Trojan Travnet is sent out to new computers through specially-crafted files that are designed to look like harmless RTF or Excel documents. However, these files include hidden content that exploits various software vulnerabilities for installing Trojan Travnet. Patching all of your software is, accordingly, one of the most important things that you can do to block drive-by-downloads involving Trojan Travnet or similar PC threats. However, this protection can't be considered foolproof; SpywareRemove.com malware researchers warn that similar attacks also have been known to use zero-day vulnerabilities that are unaffected by patches.

A successful Trojan Travnet infection will scan your computer for any files that are likely to hold confidential information – such as TXT files, DOC files and PDF files. These files then are sent to a server for criminal perusal. The upload process involves encryption and other methods of circumventing basic security programs.

SpywareRemove.com malware experts also have found that Trojan Travnet has been known to inject its code into the memory processes of Web browsers in particular. Since such attacks often are linked to efforts to steal passwords and other information that's transmitted through your browser, you should minimize your browser usage on any Trojan Travnet-infected PC until you can remove Trojan Travnet.

Keeping Trojan Travnet from Pulling Off a Heist on Your Hard Drive

As mentioned earlier, keeping your browser, document readers and other programs updated will reduce the vulnerabilities that can be used for installing Trojan Travnet. SpywareRemove.com malware analysts also suggest that you be cautious about opening files from unusual sources like unexpected e-mail messages – in most cases, scanning these Trojan droppers with an anti-malware product should be able to detect the malicious content that's used for placing Trojan Travnet on your computer.

An actual Trojan Travnet infection does not show any major symptoms and, in most cases, shouldn't be easily detected by eye. However, Trojan Travnet is an old and thoroughly-identified PC threat that most anti-malware applications should be able to detect during a system scan. After you've deleted Trojan Travnet, SpywareRemove.com malware experts also recommend taking other steps to verify the integrity of your passwords, credit card numbers and other potentially-stolen data.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 352.25 KB (352256 bytes)
MD5: 8eee05f433fd3a166ee752d64d4ca1a0
Detection count: 95
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 20, 2013
file.exe File name: file.exe
Size: 204.8 KB (204800 bytes)
MD5: 3c0ea91ea42f2bf6686e9735998e406e
Detection count: 93
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 20, 2013
file.exe File name: file.exe
Size: 326.65 KB (326656 bytes)
MD5: 6d00e4f95fba02126b32bb74dc4fec55
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 20, 2013
file.exe File name: file.exe
Size: 47.44 KB (47448 bytes)
MD5: 4ecbe7c571387b479862a4c87b111d44
Detection count: 90
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 20, 2013
file.exe File name: file.exe
Size: 141.82 KB (141824 bytes)
MD5: 2ac8f77548e87b401767c7076adfa00d
Detection count: 89
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 20, 2013
Plan for teaching the Navy in 2013 goda.xls File name: Plan for teaching the Navy in 2013 goda.xls
Mime Type: unknown/xls
Group: Malware file
22.01.2013.doc File name: 22.01.2013.doc
Mime Type: unknown/doc
Group: Malware file
Loading...