Home Malware Programs Trojans Trojan:Win32/NfLog.A

Trojan:Win32/NfLog.A

Posted: November 19, 2012

Threat Metric

Threat Level: 9/10
Infected PCs: 40
First Seen: November 19, 2012
Last Seen: November 13, 2023
OS(es) Affected: Windows

Trojan:Win32/NfLog.A is a Trojan that allows attackers to run commands on the affected computer. Once installed on the compromised PC, Trojan:Win32/NfLog.A drop potentially malicious files. Trojan:Win32/NfLog.A also modifies the Windows Registry. Trojan:Win32/NfLog.A may be downloaded and installed by another malware threat on the infected computer system. Trojan:Win32/NfLog.A connects to a remote server to receive commands.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



nfipv6.ocx File name: nfipv6.ocx
Mime Type: unknown/ocx
Group: Malware file
msmapi.ocx File name: msmapi.ocx
Mime Type: unknown/ocx
Group: Malware file
$NtUninstallKB942388$ File name: $NtUninstallKB942388$
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Clock "HID" = "[hex value]"
Loading...