Disagree with this determination?
NAH_FDWN.EXE
Malware DownloaderYour PC is infected. The file called NAH_FDWN.EXE is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including NAH_FDWN.EXE as soon as possible. The free version of Prevx 3.0 will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx 3.0.
Associated Malware Groups
The filename is associated with the malware group:
- Malware Downloader
File Behavior
NAH_FDWN.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Writes to another Process's Virtual Memory (Process Hijacking)
- The Process is polymorphic and can change its structure
NAH_FDWN.EXE has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Executed as a Process
Country Of Origin
The filename NAH_FDWN.EXE was first seen on Nov 27 2008 in the following geographical region of the Prevx community:
- The EUROPEAN UNION on Nov 27 2008
File Name Aliases
NAH_FDWN.EXE can also use the following file names:
- NAH_ISVW.EXE
- NAH_WTMK.EXE
- NAH_MQIG.EXE
- NAH_CSVI.EXE
- NAH_EIPG.EXE
- NAH_LJNO.EXE
- NAH_XSVC.EXE
- NAH_HNEO.EXE
- NAH_SUCT.EXE
- NAH_LRGS.EXE
- NAH_HJUO.EXE
- NAH_LMGC.EXE
- NAH_UFVO.EXE
- EANQKAAC.EXE
- NAH_UFRV.EXE
- NAH_VOVD.EXE
- KGNAANOF.EXE
- NAH_RHKS.EXE
- NAH_JEOH.EXE
Filesizes
This file has been seen with the following file size:
- 80,384 bytes
Vendor, Product and Version Information
A file with the name NAH_FDWN.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- Microsoft Corporation; Attribute Utility; 5.00.2147.1
File Type
The filename NAH_FDWN.EXE refers to an executable program.